Trigger.dev customer environment variables exposed

Re:Trigger.dev customer environment variables exposed by reassess_blind on Sunday November 01, 2026 @10:25PM (#50332800)

Have any of these companies disclosed the actual vulnerabilities used to gain access to their systems?

[ Parent | on HN ]

Re:Trigger.dev customer environment variables exposed by dboreham on Sunday November 01, 2026 @11:41PM (#50333203)

No. Which may mean they don't know.

[ Parent | on HN ]

Re:Trigger.dev customer environment variables exposed by tough on Monday November 02, 2026 @02:32AM (#50334067)

the recent CVE making any non-patched TCP exposed linux server RCE-root-able seems like a good stretch to me.

But could also be any of the recent supply chain attacks hitting a dev too i guess

[ Parent | on HN ]

Re:Trigger.dev customer environment variables exposed by bbartlomiej on Monday November 02, 2026 @06:34AM (#50335525)

Northflank mentioned they patched CVE-2026-98432. This appears to be similar, though not confirmed by trigger.dev yet

[ Parent | on HN ]