Skip to content
OpenAdvisories

Vendor

Temporal

3 known vulnerabilities.

Products

Temporal 2 OSS Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.3
    CVE-2025-14986

    ExecuteMultiOperation Namespace Policy Bypass

    When frontend.enableExecuteMultiOperation is enabled, the server can apply namespace-scoped validation and feature gates for the embedded StartWorkflowExecutionRequest using its Namespace field rather than the outer, authorized ExecuteMultiOperationRequest.Na…

    Temporal Temporal go.temporal.io/server Go