{"data":{"id":"e6b219dd-9e38-4251-8362-e2db9ac2f1a7","title":"CVE-2026-63342: Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, ap","summary":"Hatchet is a platform that manages background tasks and AI workflows. Before version 0.91.1, it had a security flaw where an authenticated user (someone with login credentials) could read another company's task event logs if they knew the task's unique identifier, potentially exposing sensitive information like task names, workflow details, and timing data.","solution":"This issue is fixed in version 0.91.1.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-63342","publishedAt":"2026-09-21T16:17:10.737Z","cveId":"CVE-2026-63342","cweIds":["CWE-863"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["Hatchet"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-21T16:17:10.737Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}