Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

daytona — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in daytona, with AI-generated Chinese analysis, references, and POCs.

Vendor: daytonaio

CVE IDTitleCVSSSeverityPublished
CVE-2026-54320 Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email CWE-287 8.4 High2026-06-23
CVE-2026-54321 Daytona: Public sandbox previews remain accessible for up to one hour after being made private CWE-613 7.0 High2026-06-23
CVE-2026-54319 Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape CWE-22 4.2 Medium2026-06-23
CVE-2026-54322 Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles CWE-639 7.7 High2026-06-23
CVE-2026-54324 Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join CWE-639 6.5 Medium2026-06-23
CVE-2026-54323 Daytona: Git credential leak via git clone with TLS verification disabled CWE-295 5.9 Medium2026-06-23

All 6 known CVE vulnerabilities affecting daytona with full Chinese analysis, references, and POCs where available.