CVE-2026-54319

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be a volume name) was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volume base directory. This vulnerability is fixed in 0.186.

CVSS v3 4.2 MEDIUM

4.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/daytonaio/daytona/security/advisories/GHSA-fjv8-j4p5-cr9m

Configurations

No configuration.

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Daytona es un tiempo de ejecución de infraestructura seguro y elástico para la ejecución de código generado por IA y flujos de trabajo de agentes. Antes de 0.186, una referencia de volumen de sandbox (volumeId, que también puede ser un nombre de volumen) se reenviaba al runner y se utilizaba para construir la ruta de origen del bind-mount del host sin confinamiento. Una referencia que contenía secuencias de recorrido de rutas podría en principio resolver el origen del montaje fuera del directorio base por volumen previsto. Esta vulnerabilidad está corregida en 0.186.

Information

Published : 2026-06-23 19:17

Updated : 2026-10-25 23:10

NVD link : CVE-2026-54319

Mitre link : CVE-2026-54319

CVE.ORG link : CVE-2026-54319

JSON object : View

Products Affected

No product.

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-250

Execution with Unnecessary Privileges

CWE-269

Improper Privilege Management

{"id": "CVE-2026-54319", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54319", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-24T13:36:26.958408Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.2, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 1.6}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "daytonaio", "product": "daytona", "versions": [{"status": "affected", "version": "< 0.186"}]}]}], "published": "2026-06-23T19:17:07.810", "references": [{"url": "https://github.com/daytonaio/daytona/security/advisories/GHSA-fjv8-j4p5-cr9m", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-250"}, {"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be a volume name) was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volume base directory. This vulnerability is fixed in 0.186."}, {"lang": "es", "value": "Daytona es un tiempo de ejecuci\u00f3n de infraestructura seguro y el\u00e1stico para la ejecuci\u00f3n de c\u00f3digo generado por IA y flujos de trabajo de agentes. Antes de 0.186, una referencia de volumen de sandbox (volumeId, que tambi\u00e9n puede ser un nombre de volumen) se reenviaba al runner y se utilizaba para construir la ruta de origen del bind-mount del host sin confinamiento. Una referencia que conten\u00eda secuencias de recorrido de rutas podr\u00eda en principio resolver el origen del montaje fuera del directorio base por volumen previsto. Esta vulnerabilidad est\u00e1 corregida en 0.186."}], "lastModified": "2026-10-25T23:10:00.167", "sourceIdentifier": "security-advisories@github.com"}