CVE-2026-88978: Hatchet cross-tenant data exposure through WorkerStatus gRPC polling

Summary

Hatchet, a platform for orchestrating background tasks, AI agents, and durable workflows, has a flaw in versions before 0.106.1. The WorkerStatus gRPC polling path in pkg/repository/durable_events.go passes caller-supplied durable task, node, and branch identifiers to ListSatisfiedEntries without a tenant filter. An authenticated tenant worker that knows another tenant's durable-task UUID can retrieve matching durable event-log records. The source notes that the UUIDv4 requirement makes exploitation unlikely and that single-tenant deployments are unaffected in practice.

Mitigation

This issue is fixed in version 0.106.1.

Topics

• AI agents

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News