{"id":"CVE-2026-61681","published":"2026-09-21T16:17:09.823","lastModified":"2026-09-21T16:17:09.823","description":"Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, the SNS UnsubscribeConfirmation handler in internal/integrations/ingestors/sns/sns.go calls http.Get() on payload.UnsubscribeURL after VerifyPayload() even though BuildSignature() excludes UnsubscribeURL, allowing an authenticated Hatchet tenant to replace that field in an otherwise valid AWS-signed message with an internal URL. The server-side request can reach EC2 Instance Metadata Service, internal services, and internal HTTP APIs, potentially exposing IAM credentials or network-accessible data and functionality. This issue is fixed in version 0.91.1.","cvssScore":4.1,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98","tags":[]},{"url":"https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499","tags":[]}],"exploitRefs":[{"url":"https://github.com/hatchet-dev/hatchet/commit/2d211bce16e5022afaf95780de82dc30e0bcba98","tags":[]},{"url":"https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-fjwv-jf2v-j499","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows an authenticated user to replace the UnsubscribeURL with an internal URL, leading to potential exposure of sensitive data and credentials.","exploitability":"Exploitation requires authentication as a Hatchet tenant and control over an AWS-signed message; moderate difficulty due to signature validation but easy if attacker can manipulate payload.","blast_radius":"If exploited, could lead to unauthorized access to internal services, IAM credentials, or network-accessible data within the same environment.","remediation":"Update to version 0.91.1 of Hatchet immediately to address this vulnerability.","tags":["auth-bypass","aws","internal-exploit","data-exposure"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-22T06:35:41.117Z"}}