{"id":"CVE-2026-63342","published":"2026-09-21T16:17:10.737","lastModified":"2026-09-21T16:17:10.737","description":"Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, api-contracts/openapi/paths/v1/workflow-runs/workflow_run.yaml defines the GET /api/v1/stable/durable-tasks/{durable-task} endpoint implemented by listDurableEventLog without requiring the target tenant as a parent resource, allowing an authenticated user who obtains another tenant's durable task UUID to read that task's event log. Disclosed data can include task display names, workflow identifiers, user messages, wait conditions, branching logic, and timing information. This issue is fixed in version 0.91.1.","cvssScore":6.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://github.com/hatchet-dev/hatchet/commit/06c1fe43543e853ea98ecc2e6a575e2b8310bbeb","tags":[]},{"url":"https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-g26x-m427-f48f","tags":[]}],"exploitRefs":[{"url":"https://github.com/hatchet-dev/hatchet/commit/06c1fe43543e853ea98ecc2e6a575e2b8310bbeb","tags":[]},{"url":"https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-g26x-m427-f48f","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows an authenticated user to read another tenant's durable task event logs by exploiting a misconfigured API endpoint, potentially revealing sensitive workflow details.","exploitability":"Exploitation requires access to an authenticated session and knowledge of another tenant’s durable task UUID; moderate difficulty due to authentication requirement but ease in identifying target tasks.","blast_radius":"If exploited, the impact could be significant as it compromises the privacy and security of workflows, including display names, user messages, and timing information across different tenants.","remediation":"Update to version 0.91.1 or apply a patch that properly enforces tenant scope checks on API endpoints.","tags":["auth-bypass","api-security","data-exposure","workflows"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-22T06:21:24.086Z"}}