Executive brief
Hatchet is an orchestration platform used to manage background tasks and AI workflows. A security flaw allowed authenticated users to bypass authorization checks and view task metadata belonging to other organizations (tenants) on the same system. While sensitive task inputs were not exposed, an attacker could see workflow details and internal metadata, potentially leading to the disclosure of user identifiers or correlation tokens.
Technical details
A missing authorization directive on the 'GET /api/v1/stable/dags/tasks' endpoint caused Hatchet's tenant-membership check to be bypassed. The 'listTasksByDAGIds' operation failed to declare the 'x-resources: ["tenant"]' attribute in its OpenAPI definition, preventing the middleware from populating the request context with tenant information and triggering the necessary authorization logic. An attacker with an account on the same instance could provide a victim's tenant UUID and DAG UUID to retrieve task metadata, including workflow IDs, status, and 'additional_metadata' JSON fields. The vulnerability is fixed in version 0.83.39 by adding explicit authorization checks to the handler.
Affected products
- Hatchet Hatchet < 0.83.39
Timeline
- 2026-04-23: disclosed: Reported to Hatchet
- 2026-04-23: patched: Patch deployed to Hatchet Cloud and released as v0.83.39
- 2026-05-14: advisory: CVE published