Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join
Priority LOW 29CWE-639Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-639.
Summary
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user to subscribe to another organization's realtime notification channel and passively receive that organization's events. This vulnerability is fixed in 0.185.0.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00456 39th percentileScored 2026-11-07
Fix Fixed daytona (daytonaio): 0.185.0github.com/daytonaio/daytona (Go): 0.185.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| daytonaio | daytona | before 0.185.0 | 0.185.0 | Patch available | CNA |
| — | github.com/daytonaio/daytona (Go) | before 0.185.0 | 0.185.0 | Patch available | GHSA-qwxf-2m7m-2m3x |
- daytona Vendordaytonaio Affected before 0.185.0 Fixed in 0.185.0 Patch available CNA
- github.com/daytonaio/daytona (Go) Vendor— Affected before 0.185.0 Fixed in 0.185.0 Patch available GHSA-qwxf-2m7m-2m3x
Remediation
- Fix · CNA daytona (daytonaio) Fixed in 0.185.0
- Fix · GHSA-qwxf-2m7m-2m3x github.com/daytonaio/daytona (Go) Fixed in 0.185.0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-54324
- 2026-10-03 Alias added: GHSA-qwxf-2m7m-2m3x
References
More daytonaio vulnerabilities
- TI-2026-39215 Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email CVSS 3.1HIGH 8.4
- TI-2026-39217 Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles CVSS 3.1HIGH 7.7
- TI-2026-39216 Daytona: Public sandbox previews remain accessible for up to one hour after being made private CVSS 3.1HIGH 7.0
- TI-2026-39218 Daytona: Git credential leak via git clone with TLS verification disabled CVSS 3.1MEDIUM 5.9
- TI-2026-39214 Path traversal in daytonaio daytona CVSS 3.1MEDIUM 4.2
Sources
- CVE-2026-54324 · CVE Program
- CVE-2026-54324 · NVD
- FIRST EPSS
- GHSA-qwxf-2m7m-2m3x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences