CVE-2026-54746: Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0

Hatchet is a platform for managing background tasks and AI workflows. From versions 0.40.0 to 0.91.0, the gRPC service (a communication system for different parts of software) failed to verify that a worker ID (a unique identifier for a processing unit) actually belonged to the tenant (a customer's isolated workspace) making the request, allowing an authenticated attacker to interfere with another tenant's workers by changing their settings or disconnecting them, which could disrupt service or compromise data in shared deployments.