Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

Trigger.dev Customers' Environment Variables Exposed

2 sources · 3 articlesFirst reported Updated ()1
What's new

November 2: The Register reports add that Trigger.dev is a TypeScript-based durable execution platform for AI workflows and mention webhook integrations with Stripe, Supabase and Slack.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Trigger.dev disclosed attacker access to subset of customers' environment variables on November 1, 2026; exploit blocked and affected notified.

Trigger.dev reported on November 1, 2026, that an attacker gained unauthorized access to environment variables for a subset of organizations. The exploit was blocked after detection. Affected account owners were emailed mitigation steps. The company, a TypeScript-based open-source AI workflow platform, did not name the flaw, count affected organizations or specify variables. High-profile customers include Emporio Armani and Cal.com. Integrations with Stripe, Supabase and Slack via webhooks may be at risk.

Key facts
  • Attacker gained unauthorized access to environment variables for subset of organizations (November 1, 2026)
  • Exploit blocked; affected customers emailed mitigation steps
  • No details released on flaw, affected count or variables
  • Open-source TypeScript platform for AI agents and workflows
  • High-profile customers: Emporio Armani, Cal.com
  • Webhook integrations with Stripe, Supabase, Slack
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 1, 2026Attacker gained unauthorized access to subset of organizations' environment variables · Trigger.dev incident notice
  2. Nov 2, 2026Company blocked exploit and emailed mitigation steps to impacted customers · Hacker News
  3. Nov 2, 2026Trigger.dev disclosed incident affecting subset of organizations · The Register

What each outlet adds

beyond the shared facts
  • Hacker NewsIncident notice dated November 1, 2026 signed by CTO Eric Allam; exposure limited to unquantified subset of organizations
  • The RegisterTrigger.dev is TypeScript durable execution platform for AI agents and workflows; integrations include webhooks for Stripe, Supabase and Slack
Vendors
Trigger.devTrigger
Products
Trigger.dev
Victims
customers

Coverage

oldest first · one row per article · UTC
  1. · 22h ago Hacker News · securityFirst report

    Trigger.dev says attacker accessed some customers' environment variables

    The company says it blocked the exploit and emailed affected account owners mitigation steps.

  2. · 7h ago The Register · Security

    Trigger.dev exposes environment variables in security incident

    Customers of Trigger.dev's AI workflow platform had environment variables exposed, with affected organizations notified and steps to take provided.

  3. · 7h ago The Register · Security

    Trigger AI workflow tool exposes environment variables

    Trigger.dev disclosed that an attacker gained unauthorized access to environment variables belonging to a subset of its customers.