CVE-2026-61681: Hatchet SNS subscription handler server-side request forgery via UnsubscribeURL

Summary

Hatchet, a platform for orchestrating background tasks, AI agents and durable workflows, prior to 0.91.1 has a flaw in the SNS UnsubscribeConfirmation handler in internal/integrations/ingestors/sns/sns.go. The handler calls http.Get() on payload.UnsubscribeURL after VerifyPayload(), but BuildSignature() excludes that field, so an authenticated tenant can replace it with an internal URL in an otherwise valid AWS-signed message. The resulting server-side request can reach the EC2 Instance Metadata Service, internal services and internal HTTP APIs, potentially exposing IAM credentials or network-accessible data and functionality.

Mitigation

Fixed in 0.91.1

Topics

• AI agents

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News