Trigger.dev's webhook alert channels lack URL validation, allowing authenticated users to trigger POST requests to internal addresses and metadata endpoints. The vulnerability enables SSRF attacks on internal infrastructure and cloud metadata services without any private-IP or redirect filtering.
Disclosed 2 October 2026 · Record updated 2 October 2026
Authenticated organization members can create webhook alert channels pointing to internal addresses, allowing the server to make unvalidated POST requests to internal-only services, cloud metadata endpoints, and perform internal host/port scanning.
VulnerabilitiesTwo advisories published on 2 October 2026 say any organisation member can make the Trigger.dev control plane POST signed alerts to internal and cloud metadata addresses.
2 Oct 2026
