Read the docs
TI-2026-39218 Aliases CVE-2026-54323

Daytona: Git credential leak via git clone with TLS verification disabled

Priority LOW 26CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
Spoofing
Confidentiality · integrity · availability
High · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-295.

Summary

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, the daemon's git clone implementation disabled TLS certificate verification. When a clone request carried Git credentials, the daemon sent the HTTP Basic Authorization header to the remote over a connection whose certificate was never validated, on both the go-git and native git CLI code paths. An attacker able to intercept clone traffic could present any TLS certificate, capture the Git credentials supplied for the clone, and serve tampered repository content into the sandbox. This vulnerability is fixed in 0.185.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00185 8th percentileScored 2026-11-07
Fix Fixed daytona (daytonaio): 0.185.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
daytonaiodaytonabefore 0.185.00.185.0Patch availableCNA
  • daytona Vendordaytonaio Affected before 0.185.0 Fixed in 0.185.0 Patch available CNA

Remediation

  • Fix · CNA daytona (daytonaio) Fixed in 0.185.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-54323

References

Other 1

  • TI-2026-39215 Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email CVSS 3.1HIGH 8.4
  • TI-2026-39217 Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles CVSS 3.1HIGH 7.7
  • TI-2026-39216 Daytona: Public sandbox previews remain accessible for up to one hour after being made private CVSS 3.1HIGH 7.0
  • TI-2026-39219 Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join CVSS 3.1MEDIUM 6.5
  • TI-2026-39214 Path traversal in daytonaio daytona CVSS 3.1MEDIUM 4.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences