CyberRota Analysis
AI-GeneratedThe vulnerability allows an attacker to take over user accounts by exploiting the addGoogleStrategy() function, which does not verify the authenticity of Google profile emails before associating them with existing accounts. This flaw can lead to unauthorized access and account takeover, posing a significant risk to users of the Trigger.dev platform. Organizations utilizing versions prior to 4.5.2 should prioritize updating to the latest version to mitigate this high-severity security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser() in apps/webapp/app/models/user.server.ts without requiring Google's email_verified assertion. When existingEmailUser && !existingUser is true, the flow writes the new Google authIdentifier into the existing email-matched account and returns that user object, allowing an attacker-controlled Google profile with an unverified matching email to take over the account. This issue is fixed in version 4.5.2.