{"data":{"id":"af8fddf9-71c8-4035-bbe3-9c8d29b98c3a","title":"CVE-2026-61687: Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, Va","summary":"Hatchet is a platform for running background tasks and AI workflows. Before version 0.91.1, it had a security flaw where the OAuth state validation (a security check that confirms login requests are legitimate) could be bypassed by an attacker, allowing them to connect a victim's account to an attacker's login credentials if certain OAuth providers like Google or GitHub were enabled.","solution":"This issue is fixed in version 0.91.1.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-61687","publishedAt":"2026-09-21T16:17:09.997Z","cveId":"CVE-2026-61687","cweIds":["CWE-287","CWE-352","CWE-384","CWE-1275"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["Hatchet"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-21T16:17:09.997Z","capecIds":["CAPEC-114"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}