Observed incident

Trigger.dev attacker accesses some organizations’ environment variables

Reported

Published here

What happened

Trigger.dev disclosed unauthorized access to environment variables for a subset of organizations on its task and AI-agent platform.

Parties and reporting

AI tools and systems: Trigger.dev environment variables, Task and AI-agent infrastructure

Outcome

The exploit was blocked and affected account owners received mitigation instructions. The status notice is marked resolved; further technical details and downstream secret misuse are not established.

Operating lesson

Follow the provider’s account-specific instructions, rotate exposed secrets and check their downstream use.

Evidence and limits

The status notice was published November 1 at 22:50 UTC. This is a compromise of infrastructure supporting AI agents; the provider has not established attacker AI use, an exact exploit, a CVE, or the number of affected organizations. Later reporting is not a new disclosure.

Sources