CVE-2026-85650 | triggerdotdev Trigger.dev up to 4.5.1 Webhook server-side request forgery

September 4, 2026 Yanac

A vulnerability has been found in triggerdotdev Trigger.dev up to 4.5.1 and classified as critical. Impacted is an unknown function of the component Webhook. This manipulation causes server-side request forgery.

This vulnerability is handled as CVE-2026-85650. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More