Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Temporal Technologies, Inc. — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting Temporal Technologies, Inc.. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Temporal Technologies, Inc. develops workflow orchestration software enabling complex, distributed task automation across cloud environments. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and access control flaws. The company maintains four CVE records, with notable issues including authentication bypasses and insecure deserialization that could allow attackers to execute arbitrary code or compromise system integrity. While no major public security incidents have been documented, their CVE history suggests a pattern of vulnerabilities requiring timely patching to prevent potential exploitation in enterprise environments.

CVE ID Title CVSS Severity Published
CVE-2026-89140 Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule state — Temporal Server CWE-639 6.0 Medium 2026-10-12
CVE-2026-104355 Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces — Temporal Server CWE-863 7.0 High 2026-10-12
CVE-2026-96770 s2s-proxy accepts untrusted client certificates — s2s-proxy CWE-296 9.3 Critical 2026-09-23
CVE-2026-89139 Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host — Temporal Server CWE-78 8.7 High 2026-09-21
CVE-2026-87858 Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization — Temporal Server CWE-807 7.2 High 2026-09-21
CVE-2026-65654 temporalio/ringpop-go fails to enforce configured label limits on inbound membership gossip — temporalio/ringpop-go CWE-770 8.7 High 2026-09-21
CVE-2026-65653 temporalio/tchannel-go zero-chunk call fragment causes process termination — temporalio/tchannel-go CWE-129 8.7 High 2026-09-21
CVE-2026-65652 temporalio/tchannel-go malformed checksum type causes process termination — temporalio/tchannel-go CWE-129 8.7 High 2026-09-21
CVE-2026-65651 temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal — temporalio/sqlparser CWE-674 6.0 Medium 2026-09-21
CVE-2026-16651 temporalio/sqlparser malformed MySQL version comments can cause a panic — temporalio/sqlparser CWE-129 7.1 High 2026-09-21
CVE-2026-16652 Temporal Server Schedule exclusion search can cause excessive CPU consumption — Temporal Server CWE-606 7.1 High 2026-09-21
CVE-2026-65655 Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy — Temporal UI Server CWE-614 2.3 Low 2026-08-11
CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint — temporal CWE-306 5.9 - 2026-04-10
CVE-2026-5199 Cross Namespace Access via Batch Operation — temporal CWE-639 7.5AI High AI 2026-04-01
CVE-2025-1243 Field in api-go proxy not transformed before version 1.44.1 — api-go library CWE-311 8.2 - 2025-02-12
CVE-2024-2689 Denial of Service if invalid UTF-8 sent — Temporal Server CWE-20 4.4 Medium 2024-04-03

This page lists every published CVE security advisory associated with Temporal Technologies, Inc.. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.