Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/14 4:58 p.m.51 views

CVE-2026-42572 Hatchet: Cross-tenant information disclosure in `listTasksByDAGIds`

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.83.39, a missing authorization directive on the GET /api/v1/stable/dags/tasks endpoint caused Hatchet's tenant-membership check to be skipped for this route. A user authenticated to any...

5.3CVSS0.00181EPSS
SaveExploits0References1
Rows per page
Query Builder