Skip to content
The Masked Namespace Vulnerability In Temporal CVE-2025-14986
depthfirst.com | vulnerability | Medium | CVE-2025-14986 | #cloud | #vulnerability-research | #multi-tenancy | #authorization-bypass | #temporal | #cve-2025-14986 | #namespace
Summary
A deep dive into CVE-2025-14986: an identity-binding flaw in Temporal's ExecuteMultiOperation endpoint that enabled cross-tenant policy and schema confusion via bundled APIs.
- CVSS
- 5.3
- Published
- Collected