THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-73655 (HIGH 7.4) — Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser() in apps/webapp/app/models/user.server.ts with

[NVD] CVE-2026-73655 (HIGH 7.4) — Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser() in apps/webapp/app/models/user.server.ts with

lownvdPublished 2026-08-13

CVE-2026-73655 CVSS: 7.4 HIGH Published: 2026-08-13T20:17:30.153

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser() in apps/webapp/app/models/user.server.ts without requiring Google's email_verified assertion. When

Indicators of compromise

CVE-2026-73655cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73655