Vulnetix
Try Vulnetix Request Demo
CVE-2025-8396 PUBLISHED CVSS 6.900000095367432 MEDIUM

Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.This issue affects all platforms and versions of OSS Server prior to 1.26.3, 1.27.3, and 1.28.1 (i.e., fixed in 1.26.3, 1.27.3, and 1.28.1 and later). Temporal Cloud services are not impacted.

EPSS 0.11% · 30.0th percentile

Risk Scores

CVSS v4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/S:N/AU:Y
EPSS Score
0.11%
30.0th percentile

Affected Products

VendorProductVersions
TemporalOSS Server0, 1.27.0, 1.28.0
go.temporal.ioserver0, 1.27.0-126.0, 1.28.0-129.0

Timeline

References

Open in Interactive Console →