Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and generatePresignedRequest in apps/webapp/app/v3/objectStore.server.ts, allowing .. traversal to escape the packets/<projectRef>/<env>/ object-store prefix and enabling a project API key to read or overwrite another organization's offloaded task payloads and outputs on multi-organization self-hosted instances. This issue is fixed in version 4.5.0.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
References 4
https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f97…
security-advisories@github.com
https://github.com/triggerdotdev/trigger.dev/pull/3830
security-advisories@github.com
https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0
security-advisories@github.com
https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m3mf-37q7…
security-advisories@github.com