CVE-2026-114090
Received Received - Intake

Trigger.dev CLI v3 Missing Authentication in MCP Server

Publication date: 2026-10-21

Last updated on: 2026-10-21

Assigner: VulnCheck

Description
Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task, cancel-run, list-runs, and get-run-logs using the developer's stored access token.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-21
Last Modified
2026-10-21
Generated
2026-11-10
AI Q&A
2026-10-21
EPSS Evaluated
2026-11-08
NVD
CVE-2026-114090
EUVD
EUVD-2026-106893

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
trigger.dev cli-v3 3.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Trigger.dev CLI versions 3.0.0 to 4.5.3 have a missing authentication vulnerability in the MCP server. The `trigger dev --mcp` command starts a server binding to all network interfaces without authentication, exposing /sse and /messages endpoints. Attackers on the LAN or malicious web pages can send unauthorized requests to invoke actions like trigger-task, cancel-run, list-runs, and get-run-logs using the developer's stored access token.

Detection Guidance

Check if the MCP server is running on your system by inspecting running processes for 'trigger dev --mcp'. Verify if the server is bound to all network interfaces (0.0.0.0) using commands like 'netstat -tuln | grep 0.0.0.0' or 'ss -tuln | grep 0.0.0.0'. Inspect network traffic to the /sse and /messages endpoints using tools like Wireshark or tcpdump.

Impact Analysis

Attackers could execute arbitrary tasks, cancel ongoing runs, or access sensitive data like logs containing PII or secrets. This is possible even from a malicious browser tab if the developer is authenticated in the same session.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA compliance requirements for data protection and access controls.

Mitigation Strategies

Upgrade Trigger.dev CLI to version 4.5.4 or later. If upgrading is not possible, bind the MCP server to the loopback interface (127.0.0.1) instead of all interfaces. Add a shared-secret token for authentication on the exposed endpoints. Disable the MCP server if not in use.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-114090. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...