CVE-2026-54324

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user to subscribe to another organization's realtime notification channel and passively receive that organization's events. This vulnerability is fixed in 0.185.0.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/daytonaio/daytona/security/advisories/GHSA-qwxf-2m7m-2m3x

Configurations

No configuration.

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Daytona es un tiempo de ejecución de infraestructura seguro y elástico para la ejecución de código generado por IA y flujos de trabajo de agentes. Antes de 0.185.0, un fallo de autorización entre inquilinos en la pasarela WebSocket de notificaciones de Daytona permitía a cualquier usuario autenticado suscribirse al canal de notificaciones en tiempo real de otra organización y recibir pasivamente los eventos de esa organización. Esta vulnerabilidad está corregida en 0.185.0.

Information

Published : 2026-06-23 18:18

Updated : 2026-10-25 23:10

NVD link : CVE-2026-54324

Mitre link : CVE-2026-54324

CVE.ORG link : CVE-2026-54324

JSON object : View

Products Affected

No product.

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

CWE-863

Incorrect Authorization

{"id": "CVE-2026-54324", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54324", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-25T12:42:40.744166Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "daytonaio", "product": "daytona", "versions": [{"status": "affected", "version": "< 0.185.0"}]}]}], "published": "2026-06-23T18:18:09.143", "references": [{"url": "https://github.com/daytonaio/daytona/security/advisories/GHSA-qwxf-2m7m-2m3x", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-639"}, {"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user to subscribe to another organization's realtime notification channel and passively receive that organization's events. This vulnerability is fixed in 0.185.0."}, {"lang": "es", "value": "Daytona es un tiempo de ejecuci\u00f3n de infraestructura seguro y el\u00e1stico para la ejecuci\u00f3n de c\u00f3digo generado por IA y flujos de trabajo de agentes. Antes de 0.185.0, un fallo de autorizaci\u00f3n entre inquilinos en la pasarela WebSocket de notificaciones de Daytona permit\u00eda a cualquier usuario autenticado suscribirse al canal de notificaciones en tiempo real de otra organizaci\u00f3n y recibir pasivamente los eventos de esa organizaci\u00f3n. Esta vulnerabilidad est\u00e1 corregida en 0.185.0."}], "lastModified": "2026-10-25T23:10:00.167", "sourceIdentifier": "security-advisories@github.com"}