CVE-2026-104355— Temporal Server 命名空间复制漏洞
一分钟漏洞结论
影响对象
Temporal Technologies, Inc. Temporal Server
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
已连接的对等集群（peer cluster）可以修改时序服务器集群的本地命名空间，这些本地命名空间永远不会被复制给该对等集群，因为接收方集群会将来自传入的命名空间复制更新应用于这些本地命名空间。在多云集群部署中，每个集群会从管理员已注册并启用连接的对等集群中拉取复制任务；发送方会排除本地命名空间，但接收方不会应用相同的规则。当传入的任务引用一个已存在的命名空间时，服务器仅检查命名空间标识符是否匹配，然后覆盖其状态、描述、所有者、保留策略、归档设置和集群列表，并且在任务携带更高故障转移版本时还会覆盖其活跃集群，而不会
影响版本矩阵 5
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Temporal Technologies, Inc. | Temporal Server | 0.0.0< 1.0.0 |
unknown |
1.0.0≤ 1.29.7 |
affected | ||
1.30.0< 1.30.8 |
affected | ||
1.31.0< 1.31.4 |
affected | ||
1.32.0< 1.32.1 |
affected |
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-104355 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces
来源: CVE Program / CVE List V5
Vulnerability Description
A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote clusters an administrator has registered with connection enabled; the sending side excludes local namespaces, but the receiving side does not apply the same rule. When an inbound task names an existing namespace, the server checks at most that the namespace identifiers match, then overwrites its state, description, owner, retention, archival settings, and cluster list, and its active cluster when the task carries a higher failover version, without checking that the namespace is global. A party that controls a registered peer's replies, by operating or compromising it, can therefore change any local namespace whose name and identifier it can supply, without any credential on the receiving cluster: for example, marking it Deprecated, making the peer its active cluster, and shortening its retention, after which new Workflow starts in that namespace fail. Local namespaces include the built-in temporal-system namespace. Namespace metadata the History service refreshes from the peer while processing its history replication tasks passes through the same logic. A cluster with no remote cluster registered with connection enabled is not exposed.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Temporal Technologies, Inc. | Temporal Server | 1.0.0 ~ 1.29.7 |
cpe:2.3:a:temporal:temporal:*:*:*:*:*:*:*:*
|
|
二、漏洞 CVE-2026-104355 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-104355 的情报信息
请登录查看更多情报信息。
CVE-2026-104355 补丁与修复 (4)
-
-
🔗 Release v1.31.4 · temporalio/temporal · GitHub release-notes
-
-
CVE-2026-104355 厂商页面 (1)
CVE-2026-104355 其他参考 (1)
-
🔗 Release v1.30.8 · temporalio/temporal · GitHub release-notes
IV. Related Vulnerabilities
V. Comments for CVE-2026-104355
暂无评论