CVE-2026-61687: Hatchet OAuth state validation flaw allows session binding to attacker identity

Summary

CVE-2026-61687 affects Hatchet, a platform for orchestrating background tasks, AI agents, and durable workflows, in versions prior to 0.91.1. ValidateOAuthState clears the oauth_state_ session value to an empty string after a successful OAuth callback, then accepts an empty state parameter as equal, letting an unauthenticated attacker bind a victim's session to an attacker-controlled OAuth identity. Exploitation requires the victim to have completed an OAuth flow in the current session and auth.google.enabled, auth.github.enabled, or the Slack integration to be enabled.

Mitigation

Fixed in version 0.91.1.

Topics

• AI agents

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News