Trigger.dev attacker accessed customer environment variables

Trigger.dev, a cloud-based tool for building AI agents and workflows in TypeScript, said an attacker accessed environment variables for some customers without authorization. The company's incident report identified "exposure across a subset of organizations" and said the exploit used to gain access has been blocked. Affected customers were notified of steps to prevent further problems, Trigger said.

Environment variables in SaaS and cloud services often hold credentials. If exposed, an attacker could use them to reach connected services and digital infrastructure, The Register reported. Trigger.dev sells a durable execution platform that manages retries, scaling, long-running tasks across crashes and redeployments, and monitoring.

The company's site says customers can "build durable AI agents that survive refreshes, redeploys, and crashes," and it pitches the product for tasks that run long with retries, queues, AI observability, and elastic scaling. That scaling, automated retries, and the ability to run many operations at once without timeouts could worsen the impact of stolen API keys, depending on what the credentials allow, according to The Register.

Trigger recently added webhooks for services including Stripe, Supabase, and Slack, which could expand the range of integrations affected if credentials were exposed. Stolen credentials might let an attacker interfere with connected services or workflows, The Register wrote.

Trigger lists Emporio Armani, GovSignals, and Cal.com among its customers on its website. The Register described GovSignals as a Pentagon-supporting AI acquisitions platform. The publication reported that Trigger did not say which organizations were affected.

Trigger declined to provide additional information to The Register. A company spokesperson said more details would come in a full incident report.

The Register pointed out that Trigger is open source and can be run on your own servers, a possible alternative for customers worried about the hosted version.