CVE-2026-114089 - Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover
CVE ID :CVE-2026-114089 Published : Oct. 21, 2026, 1:17 a.m. | 49 minutes ago Description :Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading /account/authorization-code/ mints a Personal Access Token without any...