CyberSecBulletin

Hatchet-dev vulnerabilities

We track 1 vulnerability in Hatchet-dev products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 21, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Hatchet-dev vulnerabilities

  • 7.1 High severity

    hatchet: Improper Authentication

    CVE-2026-61687Hatchet-dev

    Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, ValidateOAuthState clears the oauth_state_ session value to an empty string after a successful OAuth callback and later accepts an empty state