CVE-2026-61681 Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler
An authenticated user can trigger Server-Side Request Forgery in Hatchet by manipulating the SNS UnsubscribeURL, potentially exposing internal data and IAM credentials.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-61681?
CVE-2026-61681 is a medium-severity server-side request forgery vulnerability in hatchet-dev hatchet, published on 21 Sep 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, the SNS UnsubscribeConfirmation handler in internal/integrations/ingestors/sns/sns.go calls http.Get() on payload.UnsubscribeURL after VerifyPayload() even though BuildSignature() excludes UnsubscribeURL, allowing an authenticated Hatchet tenant to replace that field in an otherwise valid AWS-signed message with an internal URL. The server-side request can reach EC2 Instance Metadata Service, internal services, and internal HTTP APIs, potentially exposing IAM credentials or network-accessible data and functionality. This issue is fixed in version 0.91.1.
Weakness: CWE-918
Which versions are affected by CVE-2026-61681?
3 open source packages ship an affected version, including hatchet-dev/hatchet and github.com/hatchet-dev/hatchet.
| Package | Affected | Fixed in |
|---|---|---|
hatchet-dev/hatchet Go | All versions | 0.91.1 |
hatchet-dev/hatchet Go | All versions | 0.91.1 |
github.com/hatchet-dev/hatchet Go | All versions | 0.91.2 |
How do I fix CVE-2026-61681?
Upgrade hatchet-dev/hatchet to 0.91.1 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-61681 being exploited?
There is no known exploitation of CVE-2026-61681 in the wild and no public exploit code.
Sources
Also known as GHSA-fjwv-jf2v-j499, GO-2026-6565.