Temporal Server — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Temporal Server, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-89140	Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule state CWE-639	6.0	Medium	2026-10-12
CVE-2026-104355	Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces CWE-863	7.0	High	2026-10-12
CVE-2026-89139	Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host CWE-78	8.7	High	2026-09-21
CVE-2026-87858	Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization CWE-807	7.2	High	2026-09-21
CVE-2026-16652	Temporal Server Schedule exclusion search can cause excessive CPU consumption CWE-606	7.1	High	2026-09-21
CVE-2024-2689	Denial of Service if invalid UTF-8 sent CWE-20	4.4	Medium	2024-04-03
CVE-2023-3485	Insecure Default Authorization in Temporal Server CWE-863	3.0	Low	2023-06-30

All 7 known CVE vulnerabilities affecting Temporal Server with full Chinese analysis, references, and POCs where available.