Description
Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and generatePresignedRequest in apps/webapp/app/v3/objectStore.server.ts, allowing .. traversal to escape the packets/<projectRef>/<env>/ object-store prefix and enabling a project API key to read or overwrite another organization's offloaded task payloads and outputs on multi-organization self-hosted instances. This issue is fixed in version 4.5.0.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
triggerdotdev trigger.dev
>= 4.4.2, < 4.5.0affected
References
- https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m3mf-37q7-8928 ↗
- https://github.com/triggerdotdev/trigger.dev/pull/3830 ↗
- https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e ↗
- https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0 ↗