TI-2026-39557 Aliases CVE-2026-54746 GHSA-8x7x-83cf-c3pg

Hatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe

LOW 29CWE-639Published 2026-08-28 · Updated 2026-08-28

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: None · Low · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-639.

Summary

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and Dispatcher/Unsubscribe. An authenticated owner of any tenant who guesses another tenant's worker UUID can overwrite that worker's affinity labels or disconnect the worker from the dispatcher. This can cause cross-tenant integrity impact and denial of service on multi-tenant Hatchet Cloud or shared self-hosted deployments. Single-tenant deployments are not practically affected because the attacker and target tenant are the same. This issue is fixed in version 0.91.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00368 30th percentileScored 2026-11-07

Fix Fixed hatchet (hatchet-dev): 0.91.1github.com/hatchet-dev/hatchet (Go): 0.91.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
hatchet-dev	hatchet	0.40.0 to before 0.91.1	0.91.1	Patch available	CNA
—	github.com/hatchet-dev/hatchet (Go)	0.40.0 to before 0.91.2	0.91.2	Patch available	GHSA-8x7x-83cf-c3pg

hatchet Vendorhatchet-dev Affected 0.40.0 to before 0.91.1 Fixed in 0.91.1 Patch available CNA
github.com/hatchet-dev/hatchet (Go) Vendor— Affected 0.40.0 to before 0.91.2 Fixed in 0.91.2 Patch available GHSA-8x7x-83cf-c3pg

Remediation

Fix · CNA hatchet (hatchet-dev) Fixed in 0.91.1
Fix · GHSA-8x7x-83cf-c3pg github.com/hatchet-dev/hatchet (Go) Fixed in 0.91.2 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-54746
2026-10-03 Alias added: GHSA-8x7x-83cf-c3pg

References

Other 4

TI-2026-70733 Unauthenticated memory exhaustion in Hatchet via SNS ingestion endpoint CVSS 4.0MEDIUM 6.9
TI-2026-44164 hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState CVSS 3.1HIGH 7.1
TI-2026-45168 Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check CVSS 3.1MEDIUM 6.3
TI-2026-60309 Authorization bypass in hatchet-dev hatchet CVSS 3.1MEDIUM 4.3
TI-2026-44159 Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler CVSS 3.1MEDIUM 4.1
TI-2026-57935 Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher CVSS 3.1LOW 3.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences