A high-severity resource exhaustion vulnerability in Temporal ringpop-go allows unauthenticated remote attackers to crash the hosting process via malicious membership updates.

This is an allocation of resources without limits or throttling (CWE-770) issue where the application fails to validate label maps received via SWIM membership changes. An unauthenticated remote attacker can submit excessive label data, leading to uncontrolled memory and gossip-bandwidth consumption.

Successful exploitation results in a denial-of-service condition, rendering the affected service unavailable. Given the CVSS score of 8.7, this represents a significant threat to operational stability and uptime, as the attack vector is network-based and requires no authentication or user interaction.

Immediate Action: Upgrade the github.com/temporalio/ringpop-go library to version 0.1.0 or later, which implements the necessary validation of peer-supplied label maps.

Proactive Monitoring: Monitor network traffic for unusual volumes of SWIM membership change requests and track process memory usage for sudden spikes that may indicate exploitation attempts.

Compensating Controls: Implement network-level access controls to restrict access to the Ringpop TChannel listener to trusted peers only, effectively limiting the attack surface.

Public Exploit Available: Unknown

The potential for service disruption poses a substantial risk to production environments. Administrators should prioritize updating the library immediately, as the lack of authentication requirements makes this vulnerability highly susceptible to remote exploitation.