CVE-2026-61687: Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, Va

Hatchet is a platform for running background tasks and AI workflows. Before version 0.91.1, it had a security flaw where the OAuth state validation (a security check that confirms login requests are legitimate) could be bypassed by an attacker, allowing them to connect a victim's account to an attacker's login credentials if certain OAuth providers like Google or GitHub were enabled.