TI-2026-44159 Aliases CVE-2026-61681 GHSA-fjwv-jf2v-j499

Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler

LOW 19CWE-918Published 2026-09-21 · Updated 2026-09-24

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-918 and the CVSS impact.

Summary

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, the SNS UnsubscribeConfirmation handler in internal/integrations/ingestors/sns/sns.go calls http.Get() on payload.UnsubscribeURL after VerifyPayload() even though BuildSignature() excludes UnsubscribeURL, allowing an authenticated Hatchet tenant to replace that field in an otherwise valid AWS-signed message with an internal URL. The server-side request can reach EC2 Instance Metadata Service, internal services, and internal HTTP APIs, potentially exposing IAM credentials or network-accessible data and functionality. This issue is fixed in version 0.91.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00311 24th percentileScored 2026-11-07

Fix Fixed hatchet (hatchet-dev): 0.91.1github.com/hatchet-dev/hatchet (Go): 0.91.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
hatchet-dev	hatchet	before 0.91.1	0.91.1	Patch available	CNA
—	github.com/hatchet-dev/hatchet (Go)	before 0.91.1	0.91.1	Patch available	GHSA-fjwv-jf2v-j499

hatchet Vendorhatchet-dev Affected before 0.91.1 Fixed in 0.91.1 Patch available CNA
github.com/hatchet-dev/hatchet (Go) Vendor— Affected before 0.91.1 Fixed in 0.91.1 Patch available GHSA-fjwv-jf2v-j499

Remediation

Fix · CNA hatchet (hatchet-dev) Fixed in 0.91.1
Fix · GHSA-fjwv-jf2v-j499 github.com/hatchet-dev/hatchet (Go) Fixed in 0.91.1 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-61681
2026-10-03 Alias added: GHSA-fjwv-jf2v-j499
2026-11-04 Fix available: Go/github.com/hatchet-dev/[email protected] · GHSA-fjwv-jf2v-j499

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-61681

Other 3

TI-2026-70733 Unauthenticated memory exhaustion in Hatchet via SNS ingestion endpoint CVSS 4.0MEDIUM 6.9
TI-2026-44164 hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState CVSS 3.1HIGH 7.1
TI-2026-39557 Hatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe CVSS 3.1MEDIUM 6.4
TI-2026-45168 Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check CVSS 3.1MEDIUM 6.3
TI-2026-60309 Authorization bypass in hatchet-dev hatchet CVSS 3.1MEDIUM 4.3
TI-2026-57935 Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher CVSS 3.1LOW 3.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences