Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhighExploited in the wild

Trigger.dev discloses environment variables exposure

1 source · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Trigger.dev reported unauthorized access to environment variables of a subset of customers; exploit blocked and customers notified.

Trigger.dev, a TypeScript-based platform for AI agents and workflows, disclosed that an attacker gained unauthorized access to environment variables belonging to a subset of its customers. The exploit was detected and blocked. Affected customers received notification of steps to prevent further security problems. The company is open source and can be self-hosted with high-profile customers including Emporio Armani and Cal.com.

Key facts
  • Attacker gained unauthorized access to environment variables of subset of customers
  • Exploit blocked after detection
  • Affected customers notified of prevention steps
  • High-profile customers: Emporio Armani, Cal.com
  • Open source and self-hostable platform
  • Integrations with Stripe, Supabase, Slack
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • The RegisterMerged two nearly identical reports on Trigger.dev incident.
Vendors
Trigger.devTrigger
Products
Trigger.dev
Victims
customers

Coverage

oldest first · one row per article · UTC
  1. · 9d ago The Register · SecurityFirst report

    Trigger AI workflow tool exposes environment variables

    Trigger.dev disclosed that an attacker gained unauthorized access to environment variables belonging to a subset of its customers.

  2. · 9d ago The Register · Security

    Trigger.dev exposes environment variables in security incident

    Customers of Trigger.dev's AI workflow platform had environment variables exposed, with affected organizations notified and steps to take provided.