THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-73656 (CRITICAL 9.9) — Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDeploymentBackgroundWorkerServiceV4.call() in apps/webapp/app/v3/services/createDeploymentBackgroundWo

[NVD] CVE-2026-73656 (CRITICAL 9.9) — Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDeploymentBackgroundWorkerServiceV4.call() in apps/webapp/app/v3/services/createDeploymentBackgroundWo

lownvdPublished 2026-08-13

CVE-2026-73656 CVSS: 9.9 CRITICAL Published: 2026-08-13T20:17:30.297

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDeploymentBackgroundWorkerServiceV4.call() in apps/webapp/app/v3/services/createDeploymentBackgroundWorkerV4.server.ts, where workerDeployment.findFirst

Indicators of compromise

CVE-2026-73656cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73656