GO-2026-4273
NoneCVSS
—
EPSS
—
Published
Jan 14, 2026
CISA due date
—
The record
Temporal has an Incorrect Authorization vulnerability in go.temporal.io/server
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | go.temporal.io/server | 0 | 1.27.4 |
| Go | go.temporal.io/server | 1.28.0 | 1.28.2 |
| Go | go.temporal.io/server | 1.29.0 | 1.29.2 |
| Go | go.temporal.io/server | 1.29.0-0 | 1.29.0-135.0.0.20251218190115-b292a32bacdf |
| go | go.temporal.io/server | 1.28.0 | 1.28.2 |
| go | go.temporal.io/server | 1.29.0 | 1.29.2 |