Vulnerability in Temporal Technologies, Inc. Ui Server
CVE-2026-65655
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server…
Affected products
- Temporal Technologies, Inc. Ui Server — versions 2.7.0
Weakness classification (CWE)
References
- security@temporal.io
- security@temporal.io
- security@temporal.io
- security@temporal.io
- security@temporal.io (release-notes)
- security@temporal.io (patch)
- security@temporal.io (patch)
- security@temporal.io (release-notes)