HighFix available
Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)
Type: advisorySource: OSV
Summary The dashboard replay action authorizes the source run (it must belong to the caller's org), but the target environment for the replayed run is taken verbatim from the request body and is never checked for org…
Products: trigger.devCVEs: CVE-2026-85651