CVE-2026-61681
Received Received - Intake

Server-Side Request Forgery in Hatchet Workflow Platform

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: GitHub, Inc.

Description
Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, the SNS UnsubscribeConfirmation handler in internal/integrations/ingestors/sns/sns.go calls http.Get() on payload.UnsubscribeURL after VerifyPayload() even though BuildSignature() excludes UnsubscribeURL, allowing an authenticated Hatchet tenant to replace that field in an otherwise valid AWS-signed message with an internal URL. The server-side request can reach EC2 Instance Metadata Service, internal services, and internal HTTP APIs, potentially exposing IAM credentials or network-accessible data and functionality. This issue is fixed in version 0.91.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-21
Last Modified
2026-09-21
Generated
2026-09-21
AI Q&A
2026-09-21
EPSS Evaluated
N/A
NVD
CVE-2026-61681
EUVD
EUVD-2026-83976

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
hatchet-dev hatchet 0.91.1
hatchet-dev hatchet 0.91.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in the Hatchet platform's SNS UnsubscribeConfirmation handler. The flaw allows an authenticated tenant to replace the UnsubscribeURL field in an AWS-signed message with an internal URL. The server then makes an HTTP request to this URL, potentially exposing IAM credentials or internal network data.

Detection Guidance

Check Hatchet logs for unusual outbound requests to internal URLs or EC2 IMDS (169.254.169.254). Monitor network traffic for HTTP GET requests to unsubscribe URLs that deviate from expected AWS SNS endpoints. Review SNS message processing in internal/integrations/ingestors/sns/sns.go for calls to http.Get() on UnsubscribeURL.

  • Inspect HTTP request logs for outbound connections to 169.254.169.254 or internal IP ranges.
  • Use tools like tcpdump or Wireshark to capture traffic from Hatchet instances targeting internal services.
Impact Analysis

An attacker with a Hatchet account could exploit this to retrieve IAM temporary credentials via the EC2 Instance Metadata Service, scan internal services, or access internal HTTP APIs. This could lead to data breaches, unauthorized access, or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. It may result in data breaches, unauthorized disclosure of personal or health information, and non-compliance with regulatory standards.

Mitigation Strategies

Upgrade Hatchet to version 0.91.1 or later to apply the SSRF fix. If upgrading is not immediately possible, restrict outbound network access from Hatchet instances to prevent SSRF attacks against internal services and IMDS.

  • Apply the patch from commit 2d211bce16e5022afaf95780de82dc30e0bcba98 if upgrading is delayed.
  • Review and update firewall rules to block unauthorized outbound connections from Hatchet servers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-61681. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart