CVE-2026-63342 | hatchet-dev Hatchet up to 0.91.0 Durable Tasks workflow_run.yaml listDurableEventLog durable-task access control

September 21, 2026 Yanac

A vulnerability, which was classified as problematic, was found in hatchet-dev Hatchet up to 0.91.0. This vulnerability affects the function listDurableEventLog of the file api-contracts/openapi/paths/v1/workflow-runs/workflow_run.yaml of the component Durable Tasks. Such manipulation of the argument durable-task leads to improper access controls.

This vulnerability is listed as CVE-2026-63342. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More