Vulnerabilities

TI-2026-39215 CVE-2026-54320

Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email

LOW 38

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows.

CVSS 3.1HIGH 8.4 Network Low privileges No interaction EPSS 0.00352 Published 2026-06-23 Fixed in 0.184.0 CWE-287

TI-2026-39216 CVE-2026-54321 · GHSA-ww63-pv5x-vfc8

LOW 31

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00398 Published 2026-06-23 Fixed in 0.184.0 CWE-613

TI-2026-39214 CVE-2026-54319 · GHSA-fjv8-j4p5-cr9m

LOW 19

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00243 Published 2026-06-23 Fixed in 0.186, 0.186.0 CWE-22

TI-2026-39217 CVE-2026-54322 · GHSA-qxvm-pcfm-qc39

LOW 33

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00304 Published 2026-06-23 Fixed in 0.185.0 CWE-639

TI-2026-39219 CVE-2026-54324 · GHSA-qwxf-2m7m-2m3x

LOW 29

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00456 Published 2026-06-23 Fixed in 0.185.0 CWE-639

TI-2026-39218 CVE-2026-54323

LOW 26

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00185 Published 2026-06-23 Fixed in 0.185.0 CWE-295