{"metadata": {"vulnerability": "CVE-2026-89139", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-10T23:08:25.314Z", "date_only": false, "value": "2026-09-10T23:08:25.314Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-89139", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-21T11:41:23.342Z", "date_only": false, "value": "2026-09-21T11:41:23.342Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89139", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-21T11:41:23.342Z", "date_only": false, "value": "2026-09-21T11:41:23.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Temporal", "record": "CVE-2026-89139", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T12:17:24Z", "date_only": false, "value": "2026-09-21T12:17:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W8CX-4CF2-9HVR", "record": "GHSA-W8CX-4CF2-9HVR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-21T12:17:24.440Z", "date_only": false, "value": "2026-09-21T12:17:24.440", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89139", "record": "FKIE_CVE-2026-89139", "field": "published"}, {"timestamp": "2026-09-21T12:32:39Z", "date_only": false, "value": "2026-09-21T12:32:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W8CX-4CF2-9HVR", "record": "GHSA-W8CX-4CF2-9HVR", "field": "published"}, {"timestamp": "2026-09-21T12:32:39Z", "date_only": false, "value": "2026-09-21T12:32:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W8CX-4CF2-9HVR", "record": "GHSA-W8CX-4CF2-9HVR", "field": "modified"}, {"timestamp": "2026-09-21T13:52:41.250Z", "date_only": false, "value": "2026-09-21T13:52:41.250227Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6dwth6ysiiv4g", "record": "CVE-2026-89139", "field": "creation_timestamp", "uuid": "a48db52f-1c2b-46f8-96cd-c0423ff67d8b", "content": "CVE-2026-89139 - Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host\nCVE ID : CVE-2026-89139\n \n Published : Sept. 21, 2026, 12:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Temporal Server compiles a Worker Contr...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/6dwth6ysiiv4g"}, {"timestamp": "2026-09-21T15:24:29.098Z", "date_only": false, "value": "2026-09-21T15:24:29.098568Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89139", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-21T15:24:29.098Z", "date_only": false, "value": "2026-09-21T15:24:29.098568Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89139", "record": "FKIE_CVE-2026-89139", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-21T15:24:46.549Z", "date_only": false, "value": "2026-09-21T15:24:46.549Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-89139", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-21T15:24:46.549Z", "date_only": false, "value": "2026-09-21T15:24:46.549Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89139", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T04:40:04.482Z", "date_only": false, "value": "2026-09-22T04:40:04.482325Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw3fuwwvms2j", "record": "CVE-2026-89139", "field": "creation_timestamp", "uuid": "89c60b9d-7663-4014-94bd-0783f959ae1d", "content": "CVE-2026-89139 - temporal server\nAn authenticated user who can write in a single Temporal namespace can tell the Temporal Server to execute any command on the machine where the server runs. Because\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#temporalserver #temporal #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mw3fuwwvms2j"}, {"timestamp": "2026-09-22T19:40:05.870Z", "date_only": false, "value": "2026-09-22T19:40:05.870", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89139", "record": "FKIE_CVE-2026-89139", "field": "lastModified"}, {"timestamp": "2026-10-23T06:30:05.668Z", "date_only": false, "value": "2026-10-23T06:30:05.668236Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117488812257235598", "record": "CVE-2026-89139", "field": "creation_timestamp", "uuid": "73c76a60-6e26-48f7-a207-90262124d3a9", "content": "CVE-2026-89139: Temporal Worker Service lets any authenticated caller with a single-namespace write role run arbitrary commands via the subprocess compute provider. CVSS 9.9. No patch yet. Audit access and restrict writes. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-89139/", "url": "https://mastodon.social/users/hugovalters/statuses/117488812257235598"}]}