PT-2025-37567 · Temporal · Temporal Server

Published 2025-09-15 · Updated 2025-09-22 · CVE-2025-8396

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L

Name of the Vulnerable Software and Affected Versions Temporal Server versions prior to 1.26.3 Temporal Server versions prior to 1.27.3 Temporal Server versions prior to 1.28.1

Description Insufficiently specific bounds checking on the authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.

Recommendations Update to Temporal Server version 1.26.3 or later. Update to Temporal Server version 1.27.3 or later. Update to Temporal Server version 1.28.1 or later.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-8396

GHSA-P768-C3PR-6459

GO-2025-3953

OPENSUSE-SU-2025:15564-1

SUSE-SU-2025:03289-1

Affected Products

Temporal Server

References · 49

• https://osv.dev/vulnerability/GHSA-p768-c3pr-6459 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8396 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8396 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03289-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15564-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3953 · Vendor Advisory
• https://github.com/temporalio/temporal · Note
• https://github.com/temporalio/temporal/releases/tag/v1.28.1 · Note
• https://github.com/temporalio/temporal/releases/tag/v1.27.3 · Note
• https://github.com/temporalio/temporal/releases/tag/v1.26.3 · Note
• https://suse.com/security/cve/CVE-2025-54376 · Note
• https://suse.com/security/cve/CVE-2025-58430 · Note
• https://suse.com/security/cve/CVE-2025-58437 · Note
• https://suse.com/security/cve/CVE-2025-8396 · Note
• https://suse.com/security/cve/CVE-2025-58158 · Note