EUVD-2026-81037
GHSA-48fw-mh64-g6wf
Severity by source
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H for the state-cookie replay plus sequential-ID race, PR:L for the required account, S:C because impact crosses into a separate GitHub system, C:H repo read with only low integrity impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying state cookies and supplying sequential installation identifiers, gaining unauthorized access to the victim's repositories.
AnalysisAI
Trigger.dev before 4.6.0 allows an authenticated low-privilege user to bind an arbitrary GitHub App installation to their own organization, because the platform does not verify that the user controls that installation. By replaying a valid OAuth state cookie and supplying sequential GitHub App installation identifiers, an attacker can gain unauthorized access to the victim's repositories in multi-tenant or shared self-hosted deployments where multiple organizations connect GitHub Apps. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires (1) a valid authenticated low-privilege account on the target Trigger.dev instance (PR:L), (2) the ability to capture and replay the OAuth state cookie from the GitHub App connection flow, and (3) knowledge or successful guessing of another user's sequential GitHub App installation identifier plus winning the timing race (AC:H/AT:P). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 4.0 vector (AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H) describes a network-reachable but non-trivial attack: AC:H plus AT:P reflect the need to replay a valid state cookie AND win a race against sequential GitHub App installation identifiers, so exploitation is not push-button. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: 4.6.0. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Vendor-released patch: 4.6.0. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in TypeScript
View allPath traversal in decap-server's local proxy containment guard allows an unauthenticated attacker to read, write, or del
Unauthenticated access to the AgentOS HTTP server shipped in the npm `praisonai` package (versions 1.6.0 through 1.7.1)
Cross-tenant authorization bypass in TinaCMS self-hosted deployments allows any holder of a legitimate TinaCloud account
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependenc
Server-side request forgery in Nango through version 0.70.4 lets an authenticated user steer server-side HTTP requests t
Twenty CRM before 2.35.0 fails to enforce field- and row-level permission checks inside the groupBy-with-records GraphQL
Unauthenticated information disclosure in Rallly before 4.15.0 allows remote attackers who possess a poll's urlId to ret
SQL injection in the ORDER BY direction handling of MikroORM (a TypeScript ORM for Node.js) lets authenticated remote at
Cache-key pollution in the @orpc/server CORS plugin (oRPC versions prior to 1.14.8) allows remote, unauthenticated clien
Guest-level users on kan through 0.6.0 can create boards they are not entitled to create by invoking the GitHub project
Path traversal in the Redocly CLI `split` command (@redocly/cli prior to 2.33.2, and the 1.x line prior to 1.34.17) lets
Share
External POC / Exploit Code
Leaving vuln.today