https://vulnogram.org/ Most recent CVEs assigned by Temporal Technologies Inc. (temporal). https://vulnogram.org/seaview/icons/temporal.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-108126 https://vulnogram.org/CVE-2026-108126 temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption key by an identifier stored in the payload rather than by the namespace… Medium Thu, 15 Oct 2026 19:09:30 GMT https://vulnogram.org/CVE-2026-89140 https://vulnogram.org/CVE-2026-89140 Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace. The callback addre… Medium Mon, 12 Oct 2026 18:44:23 GMT https://vulnogram.org/CVE-2026-104355 https://vulnogram.org/CVE-2026-104355 A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluste… High Mon, 12 Oct 2026 18:43:33 GMT https://vulnogram.org/CVE-2026-96770 https://vulnogram.org/CVE-2026-96770 All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private… Critical Network Exploitable Wed, 23 Sep 2026 18:58:46 GMT https://vulnogram.org/CVE-2026-89139 https://vulnogram.org/CVE-2026-89139 Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named subprocess whose function is to launch a worker by running a command on the machine hosting the Worker Service. T… High Mon, 21 Sep 2026 11:41:23 GMT https://vulnogram.org/CVE-2026-87858 https://vulnogram.org/CVE-2026-87858 Temporal Server decided whether a Workflow completion callback was internal by reading a caller-supplied HTTP header. An authenticated caller holding only write permission in a single namespace could attach a completion callback whose URL host matche… High Mon, 21 Sep 2026 11:39:52 GMT https://vulnogram.org/CVE-2026-65654 https://vulnogram.org/CVE-2026-65654 github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application changes the local node's labels, but affected versions do not apply those limits to label maps received in SWIM membership changes. A network peer that can r… High Network Exploitable Mon, 21 Sep 2026 11:38:23 GMT https://vulnogram.org/CVE-2026-65653 https://vulnogram.org/CVE-2026-65653 github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metadata but no length-prefixed argument chunks. The fragment reader left its chunk slice empty and then unconditionally selected the first element. A networ… High Network Exploitable Mon, 21 Sep 2026 11:36:47 GMT https://vulnogram.org/CVE-2026-65652 https://vulnogram.org/CVE-2026-65652 github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can reach a listener can complete the standard initialization handshake and send a call request with an unsupport… High Network Exploitable Mon, 21 Sep 2026 11:35:40 GMT https://vulnogram.org/CVE-2026-65651 https://vulnogram.org/CVE-2026-65651 temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit. The library's String and Walk operations recursively traverse that t… High Network Exploitable Mon, 21 Sep 2026 11:34:05 GMT https://vulnogram.org/CVE-2026-16651 https://vulnogram.org/CVE-2026-16651 temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version comment whose contents are empty or consist only of one to five decimal digits. ExtractMysqlComment does not check the -1 result returned by strings.Ind… High Network Exploitable Mon, 21 Sep 2026 11:32:44 GMT https://vulnogram.org/CVE-2026-16652 https://vulnogram.org/CVE-2026-16652 Temporal Server did not bound the work performed while searching for a Schedule's next action time. An authenticated caller with namespace write permission could create or update a Schedule that combines a fine-grained cadence with an exclusion calen… High Mon, 21 Sep 2026 11:23:47 GMT https://vulnogram.org/CVE-2026-65655 https://vulnogram.org/CVE-2026-65655 When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server connection… Low Network Exploitable Tue, 11 Aug 2026 19:29:39 GMT https://vulnogram.org/CVE-2026-5724 https://vulnogram.org/CVE-2026-5724 The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflow… Medium Network Exploitable Fri, 10 Apr 2026 21:06:31 GMT https://vulnogram.org/CVE-2026-5199 https://vulnogram.org/CVE-2026-5199 A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow ID(s) and, for sign… Low Wed, 01 Apr 2026 17:49:15 GMT https://vulnogram.org/CVE-2025-14986 https://vulnogram.org/CVE-2025-14986 When frontend.enableExecuteMultiOperation is enabled, the server can apply namespace-scoped validation and feature gates for the embedded StartWorkflowExecutionRequest using its Namespace field rather than the outer, authorized ExecuteMultiOperationR… Low Tue, 30 Dec 2025 20:17:47 GMT https://vulnogram.org/CVE-2025-14987 https://vulnogram.org/CVE-2025-14987 When system.enableCrossNamespaceCommands is enabled (on by default), the Temporal server permits certain workflow task commands (e.g. StartChildWorkflowExecution, SignalExternalWorkflowExecution, RequestCancelExternalWorkflowExecution) to target a di… Medium Tue, 30 Dec 2025 20:16:20 GMT https://vulnogram.org/CVE-2025-8396 https://vulnogram.org/CVE-2025-8396 Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.This issue affects all platforms and versions of OSS Server prior to 1.26.3, 1.… Medium Network Exploitable Mon, 15 Sep 2025 14:13:26 GMT https://vulnogram.org/CVE-2025-1243 https://vulnogram.org/CVE-2025-1243 The Temporal api-go library prior to version 1.44.1 did not send `update response` information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained wi… Low Wed, 12 Feb 2025 00:09:59 GMT https://vulnogram.org/CVE-2024-2689 https://vulnogram.org/CVE-2024-2689 Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If l… Medium Wed, 03 Apr 2024 21:13:31 GMT https://vulnogram.org/CVE-2024-2435 https://vulnogram.org/CVE-2024-2435 For an attacker with pre-existing access to send a signal to a workflow, the attacker can make the signal name a script that executes when a victim views that signal. The XSS is in the timeline page displaying the workflow execution details of the wo… Medium Tue, 02 Apr 2024 16:40:24 GMT https://vulnogram.org/CVE-2023-3485 https://vulnogram.org/CVE-2023-3485 Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of… Low Fri, 30 Jun 2023 17:37:57 GMT