CVE-2026-84298: Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.95.3, th

Hatchet is a platform that manages background tasks and AI workflows, and versions before 0.95.3 had a security flaw where one tenant (a customer organization) could intercept callback results meant for another tenant's tasks. An authenticated worker from one tenant could receive another tenant's task results if they knew the task's UUID (a unique identifier) and kept a connection open to the same dispatcher process. This vulnerability doesn't apply to single-tenant deployments (systems with only one organization).