← All credits
Reported internally at Temporal Technologies, Inc.
4 vulnerability records and advisories credit this contributor.
CVE-2026-87857
Temporal Server workflow-history pagination token is not bound to the requested namespace and workflow
CVE-2026-89140
Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule state
CVE-2026-108126
temporal-proxy payload decryption is not bound to the request namespace
CVE-2026-89139
Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host