CVE-2026-88978 | Hatchet-dev Hatchet up to 0.106.0 WorkerStatus gRPC polling path durable_events.go ListSatisfiedEntries durable_task/node/branch access control

A vulnerability has been found in Hatchet-dev Hatchet up to 0.106.0 and classified as problematic. This issue affects the function ListSatisfiedEntries of the file pkg/repository/durable_events.go of the component WorkerStatus gRPC polling path. Performing a manipulation of the argument durable_task/node/branch results in improper access controls.

This vulnerability is cataloged as CVE-2026-88978. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More