CVE-2026-120091 - Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host
CVE ID :CVE-2026-120091 Published : Nov. 2, 2026, 10:17 p.m. | 46 minutes ago Description :Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers a compute provider named k8s whose function is to...