CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and Dispatcher/Unsubscribe. An authenticated owner of any tenant who guesses another tenant's worker UUID can overwrite that worker's affinity labels or disconnect the worker from the dispatcher. This can cause cross-tenant integrity impact and denial of service on multi-tenant Hatchet Cloud or shared self-hosted deployments. Single-tenant deployments are not practically affected because the attacker and target tenant are the same. This issue is fixed in version 0.91.1.
Засегнати продукти
- hatchet-dev hatchet: >= 0.40.0, < 0.91.1
Вид слабост
История
- 28 август 2026 Публикувано
Други уязвимости в hatchet-dev hatchet
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-54746
- https://nvd.nist.gov/vuln/detail/CVE-2026-54746
- https://github.com/hatchet-dev/hatchet/security/advisories/GHSA-8x7x-83cf-c3pg
- https://github.com/hatchet-dev/hatchet/commit/591a30deb8b80f02eba7014997de387d710986c9
- https://github.com/hatchet-dev/hatchet/releases/tag/v0.91.1