Vulnerability · Published Jun 23, 2026 · Assigned by GitHub_M

CVE-2026-54324Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join

Medium 6.5

In plain English

A medium-severity authorization bypass via user-controlled key in daytona from daytonaio. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.5%top 60.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user to subscribe to another organization's realtime notification channel and passively receive that organization's events. This vulnerability is fixed in 0.185.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/daytonaio/daytona	0.185.0	GHSA-qwxf-2m7m-2m3x
Go	github.com/daytonaio/daytona	0.185.0	GO-2026-5598

Affected products (as reported)

Vendor	Product	Versions
daytonaio	daytona	< 0.185.0

Weakness: CWE-639, CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/daytonaio/daytona/security/advisories/GHSA-qwxf-2m7m-2m3x x_refsource_CONFIRM