---
id: 5438
title: "The Masked Namespace Vulnerability In Temporal CVE-2025-14986"
cve: CVE-2025-14986
cvss: 5.3
severity: medium
source_domain: depthfirst.com
source_url: "https://depthfirst.com/research/the-masked-namespace-vulnerability-in-temporal-cve-2025-14986"
published_at: "2026-02-05T00:00:00Z"
tags: ["cloud", "vulnerability-research", "multi-tenancy", "authorization-bypass", "temporal", "cve-2025-14986", "namespace"]
phying_url: "https://phying.com/item/5438"
lang: en
---

# The Masked Namespace Vulnerability In Temporal CVE-2025-14986

## Summary

A deep dive into CVE-2025-14986: an identity-binding flaw in Temporal's ExecuteMultiOperation endpoint that enabled cross-tenant policy and schema confusion via bundled APIs.

## Intelligence Metadata

- **Sources:** depthfirst.com
- **CVE:** CVE-2025-14986
- **CVSS:** 5.3
- **Published:** 2026-02-05T00:00:00Z
- **Original:** https://depthfirst.com/research/the-masked-namespace-vulnerability-in-temporal-cve-2025-14986
- **Phying News:** https://phying.com/item/5438