CVE-2026-114082

Name of the Vulnerable Software and Affected Versions Trigger.dev versions prior to 4.6.2

Description An authorization issue allows holders of a public token with session write access to obtain environment-wide S2 stream credentials during session input initialization. These credentials can be used against the storage API to create, append, or trim other session and run streams, which enables the forgery of output or the permanent deletion of records.

Recommendations Update to version 4.6.2 or later.