{"id":"CVE-2026-73657","summary":"Trigger.dev: Cross-tenant payload poisoning via packet write + replay","details":"Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, `POST /api/v1/runs/:runParam/replay` in apps/webapp/app/routes/api.v1.runs.$runParam.replay.ts uses `prisma.taskRun.findUnique({ where: { friendlyId: runParam } })` without a runtimeEnvironmentId filter, then ReplayTaskRunService in apps/webapp/app/v3/services/replayTaskRun.server.ts replays the selected run in the victim environment. Any valid environment API key can therefore replay another tenant's run by friendlyId, consuming victim resources and repeating side effects; when `payloadType: \"application/store\"` is used, overrideExistingPayloadPacket() calls conditionallyImportPacket() on existingTaskRun.payload without an integrity check, so payload bytes overwritten through a separate object-store path-traversal vulnerability become attacker-controlled input to the victim task. This issue is fixed in version 4.5.0-rc.4.","aliases":["GHSA-jx48-qfwm-xq67"],"modified":"2026-09-10T03:31:07.848390474Z","published":"2026-08-13T21:15:13.982Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-22","CWE-345","CWE-639"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73657.json"},"references":[{"type":"WEB","url":"https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.4"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73657.json"},{"type":"ADVISORY","url":"https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-jx48-qfwm-xq67"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73657"},{"type":"FIX","url":"https://github.com/triggerdotdev/trigger.dev/commit/e1950778e2f2007e2d432b8f8a8fc89531c51f19"},{"type":"FIX","url":"https://github.com/triggerdotdev/trigger.dev/pull/3756"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/triggerdotdev/trigger.dev","events":[{"introduced":"e36b75785e78e1bba6af71f47d0c9af54ce2d88b"},{"fixed":"e1950778e2f2007e2d432b8f8a8fc89531c51f19"},{"fixed":"e0681d23943441bb5f0294868502950d5bf374c5"}],"database_specific":{"extracted_events":[{"introduced":"4.4.2"},{"fixed":"4.5.0-rc.4"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["v4.5.0-rc.3","v.docker.4.5.0-rc.3","helm-v4.5.0-rc.3","v4.5.0-rc.2","v.docker.4.5.0-rc.2","v4.5.0-rc.1","v.docker.4.5.0-rc.1","helm-v4.5.0-rc.1","v4.5.0-rc.0","v.docker.4.5.0-rc.0","helm-v4.5.0-rc.0","v4.4.6","v.docker.4.4.6","helm-v4.4.6","re2-test-uncaught-exception","re2-prod-uncaught-exception","helm-v4.4.5","v4.4.5","v.docker.4.4.5","build-ecr-default-policy.rc0","re2-test-supervisor-ndots-override","re2-prod-supervisor-ndots-override","helm-v4.4.4","v4.4.4","v.docker.4.4.4","re2-test-2026-04-08","re2-prod-2026-04-08","re2-test-private-link","v4.4.3","v.docker.4.4.3","v4.4.2","v.docker.4.4.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73657.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L"}]}