Skip to content
OpenAdvisories

Package · Go

github.com/daytonaio/daytona

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-54321

    Daytona: Public sandbox previews remain accessible for up to one hour after being made private

    Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private could remain reachable without authentication for a short period…

    daytonaio daytona github.com/daytonaio/daytona Go
  • High 7.7
    CVE-2026-54322

    Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles

    Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request pa…

    daytonaio daytona github.com/daytonaio/daytona Go