{"id":"CVE-2026-73654","title":"Trigger.dev is a platform for building and deploying fully managed AI agents and workflows","summary":"Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPath(operati…","severity":"high","cvss":8.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H","cwe":["CWE-1321"],"vendor":"trigger.dev","product":"@trigger.dev/core","affected":["@trigger.dev/core >= 3.3.8, <= 4.5.5"],"patched":["@trigger.dev/core 4.5.6"],"published":"2026-08-13","updated":"2026-09-18","sourceUpdated":"2026-09-18T20:09:01.757","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73654","references":[{"url":"https://github.com/triggerdotdev/trigger.dev/commit/6997aeb05e27d2db47f9eda01fdc8a17c81a1ae0","label":"security-advisories@github.com"},{"url":"https://github.com/triggerdotdev/trigger.dev/pull/4316","label":"security-advisories@github.com"},{"url":"https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.6","label":"security-advisories@github.com"},{"url":"https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-p28v-f755-9qrg","label":"security-advisories@github.com"},{"url":"https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-p28v-f755-9qrg","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://github.com/advisories/GHSA-p28v-f755-9qrg"}],"tags":["nvd","ghsa","npm"],"epss":0.00404,"epssPercentile":0.3438,"aliases":["GHSA-p28v-f755-9qrg"],"ecosystem":"npm","ingestedAt":"2026-08-13T21:07:31.789Z","slug":"CVE-2026-73654","body":"## Overview\n\nTrigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPath(operation.key).set(newMetadata, value) in packages/core/src/v3/runMetadata/operations.ts without rejecting dangerous constructor and prototype path segments. A caller with a normal environment API key can pollute Object.prototype in the shared webapp process, corrupting Prisma queries and Prometheus labels, breaking other tenants' worker authentication, and causing a process-wide denial of service. This issue is fixed in version 4.5.6.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-73654)\n\nAffected packages:\n\n- `@trigger.dev/core >= 3.3.8, <= 4.5.5`\n\nPatched in:\n\n- `@trigger.dev/core 4.5.6`\n\nSource: https://github.com/advisories/GHSA-p28v-f755-9qrg","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":46.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}