Skip to content
OpenAdvisories

Vendor

Temporal

3 known vulnerabilities.

Products

Temporal 2 OSS Server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14987

    Cross Namespace Commands Authorization Bypass

    When system.enableCrossNamespaceCommands is enabled (on by default), the Temporal server permits certain workflow task commands (e.g. StartChildWorkflowExecution, SignalExternalWorkflowExecution, RequestCancelExternalWorkflowExecution) to target a different n…

    Temporal Temporal go.temporal.io/server Go
  • Medium 6.9
    CVE-2025-8396

    Temporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling

    Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.This issue affects all platforms and versions of OSS Server prior to 1.26.3, 1.27.3, and…

    Temporal OSS Server go.temporal.io/server Go