CVE-2026-114088 - Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO
CVE ID :CVE-2026-114088 Published : Oct. 21, 2026, 1:17 a.m. | 49 minutes ago Description :Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows unauthenticated attackers to connect using the published coordinator-secret...