CVE-2026-88978: Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.106.1, t

Hatchet is a platform for managing background tasks and AI workflows at scale. Before version 0.106.1, a security flaw in the WorkerStatus gRPC polling path (a communication method between processes) allowed an authenticated user from one tenant (a separate customer account) to access another tenant's task records if they knew the task's unique identifier, though this was difficult because identifiers use UUIDv4 (a specific random ID format that's hard to guess).