Skip to content

CVE record · 1 source

CVE-2026-114087

CVSS 8.1

Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication…

Vendor: Docker
Product: PostgreSQL, Redis / Valkey, Docker Desktop / Engine, Databases
CVSS: 8.1
Exposure class: Database, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 11d ago

Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication…

Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGIC_LINK_SECRET lets anyone forge valid magic link…

CVSS 8.1 CVE-2026-114087 Docker