CVE-2026-104355: Temporal Server 1.0.0 through 1.29.7, 1.30.0 to before 1.30.8, 1.31.0 to before 1.31.4, 1.32.0 to before 1.32.1

Affected technology

Temporal Server · 1.0.0 through 1.29.7, 1.30.0 to before 1.30.8, 1.31.0 to before 1.31.4, 1.32.0 to before 1.32.1
Temporal Technologies, Inc.

Component: Worker, History
Function: nsreplication.taskExecutorImpl.shouldProcessTask, nsreplication.taskExecutorImpl.handleNamespaceUpdateReplicationTask, replication.ExecutableTaskImpl.GetNamespaceInfo, replication.eagerNamespaceRefresherImpl.SyncNamespaceFromSourceCluster, replication.taskExecutorImpl.filterTask
File: common/namespace/nsreplication/replication_task_executor.go, service/worker/replicator/replication_message_processor.go, service/history/replication/executable_task.go, service/history/replication/eager_namespace_refresher.go, service/history/replication/task_executor.go

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 7.0/10) rates confidentiality impact as none; integrity impact as high; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.