Trigger.dev Realtime API: SQL injection exposes cross-tenant task run data
Summary
Trigger.dev before 4.5.6 contains an SQL injection in the Realtime API endpoint /realtime/v1/runs. The unescaped tags parameter is concatenated into the ElectricSQL where clause, which bypasses the tenant isolation. An authenticated user with any project API key that has the read:runs scope can read task run records, including payloads and metadata, of other organizations on the same self-hosted instance. The sources describe only self-hosted deployments.
Affected
- Trigger.dev self-hosted webapp before 4.5.6 (VulnCheck and OSV: 0 to less than 4.5.6)
- The GitHub advisory lists versions up to 4.5.5 as affected
- Mend/Vulners lists a range starting at 4.4.2 (unconfirmed)
- Condition: ElectricSQL running (default in the official Docker self-host stack) and multiple organizations on one instance
Fixed in
- Version 4.5.6 (according to the vendor advisory and VulnCheck)
- Upgrade to the latest release, because later releases are affected by other issues
Workaround
- Unknown. No vendor-published interim mitigation found.
- Until patched: limit API keys with the read:runs scope and restrict network access to the self-hosted web application
Exploitation
- CISA SSVC: exploitation status proof of concept, not automatable
- Not in the CISA KEV catalog
- No reports of exploitation in the wild
- A public GitHub issue (#3739) describes the same flaw
- The attack is read-only; the Electric parser blocks functions, subqueries and stacked queries
Our recommendation
- Inventory all self-hosted Trigger.dev instances and their versions
- Upgrade to the latest release, at least 4.5.6
- Review API keys with the read:runs scope and revoke unused keys
- Do not expose the instance to the internet unless required
- Check that default secrets of the Docker Compose setup were changed
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-p6j2-2fjh-vc8v github.com
- VulnCheck advisory: Trigger.dev before 4.5.6 SQL injection www.vulncheck.com
- OSV: CVE-2026-114084 osv.dev
- Mend/Vulners: CVE-2026-114084 vulners.com
- OpenCVE: CVE-2026-114084 app.opencve.io
- Trigger.dev GitHub issue #3739 github.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 13:26.
Original description (NVD)
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates the unescaped tags query parameter into the ElectricSQL shape where clause and defeats the runtimeEnvironmentId tenant guard. Authenticated attackers holding any project API key with read:runs scope can append boolean conditions to stream TaskRun records, including payloads and metadata, from every organization on the same self-hosted instance.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.