{"apiVersion":"1.0","identifier":"CVE-2026-73657","description":"Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, `POST /api/v1/runs/:runParam/replay` in apps/webapp/app/routes/api.v1.runs.$runParam.replay.ts uses `prisma.taskRun.findUnique({ where: { friendlyId: runParam } })` without a runtimeEnvironmentId filter, then ReplayTaskRunService in apps/webapp/app/v3/services/replayTaskRun.server.ts replays the selected run in the victim environment. Any valid environment API key can therefore replay another tenant-s run by friendlyId, consuming victim resources and repeating side effects; when `payloadType: -application/store-` is used, overrideExistingPayloadPacket() calls conditionallyImportPacket() on existingTaskRun.payload without an integrity check, so payload bytes overwritten through a separate object-store path-traversal vulnerability become attacker-controlled input to the victim task. This issue is fixed in version 4.5.0-rc.4.","publishedAt":"2026-08-13T22:17:27","lastModifiedAt":"2026-08-17T18:18:14","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73657","cvssScore":4.2,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","epssProbability":0.0016,"riskScore":0.43,"affectedProduct":"Trigger.dev","affectedVersions":">=4.4.2,<4.5.0-rc.4","vulnerabilityType":"Web app","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-73657","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-73657","en":"https://www.redsauce.net/en/cves/CVE-2026-73657","fr":"https://www.redsauce.net/fr/cves/CVE-2026-73657","pt":"https://www.redsauce.net/pt/cves/CVE-2026-73657","de":"https://www.redsauce.net/de/cves/CVE-2026-73657","sk":"https://www.redsauce.net/sk/cves/CVE-2026-73657","el":"https://www.redsauce.net/el/cves/CVE-2026-73657"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-73657"}}