trigger.dev

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

trigger.dev records in CISA KEV

No trigger.dev vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-78703 CVE-2026-114090

Missing authentication in Trigger.dev CLI MCP server exposes access token

LOW 35

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints.

CVSS 4.0HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00235 Published 2026-10-21 Fixed in 4.5.4 CWE-306

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0