TI-2026-39214 Aliases CVE-2026-54319 GHSA-fjv8-j4p5-cr9m

Path traversal in daytonaio daytona

LOW 19CWE-22Published 2026-06-23 · Updated 2026-06-24

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: Privilege escalation
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-250.

Summary

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be a volume name) was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volume base directory. This vulnerability is fixed in 0.186.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00243 15th percentileScored 2026-11-07

Fix Fixed daytona (daytonaio): 0.186github.com/daytonaio/daytona (Go): 0.186.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
daytonaio	daytona	before 0.186	0.186	Patch available	CNA
—	github.com/daytonaio/daytona (Go)	before 0.186.0	0.186.0	Patch available	GHSA-fjv8-j4p5-cr9m

daytona Vendordaytonaio Affected before 0.186 Fixed in 0.186 Patch available CNA
github.com/daytonaio/daytona (Go) Vendor— Affected before 0.186.0 Fixed in 0.186.0 Patch available GHSA-fjv8-j4p5-cr9m

Remediation

Fix · CNA daytona (daytonaio) Fixed in 0.186
Fix · GHSA-fjv8-j4p5-cr9m github.com/daytonaio/daytona (Go) Fixed in 0.186.0 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-54319
2026-10-03 Alias added: GHSA-fjv8-j4p5-cr9m

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-54319

Other 2

TI-2026-39215 Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email CVSS 3.1HIGH 8.4
TI-2026-39217 Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles CVSS 3.1HIGH 7.7
TI-2026-39216 Daytona: Public sandbox previews remain accessible for up to one hour after being made private CVSS 3.1HIGH 7.0
TI-2026-39219 Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join CVSS 3.1MEDIUM 6.5
TI-2026-39218 Daytona: Git credential leak via git clone with TLS verification disabled CVSS 3.1MEDIUM 5.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences