https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 16:13:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-330142 EUVD-2026-330142 https://cve.radiocsirt.org/vuln/euvd-2026-330142 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54324 <p>Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona&#39;s notification WebSocket gateway allowed any authenticated user to subscribe to another organization&#39;s realtime notification channel and passively receive that organization&#39;s events. This vulnerability is fixed in 0.185.0.</p> <p>Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona&#39;s notification WebSocket gateway allowed any authenticated user to subscribe to another organization&#39;s realtime notification channel and passively receive that organization&#39;s events. This vulnerability is fixed in 0.185.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54324 https://cve.radiocsirt.org/vuln/ghsa-qwxf-2m7m-2m3x <p><strong>Affected:</strong> Go: github.com/daytonaio/daytona</p> <p>### Summary A cross-tenant authorization flaw in Daytona&#39;s notification WebSocket gateway allowed any authenticated user to subscribe to another organization&#39;s realtime notification channel and passively receive that organization&#39;s events.</p> <p>### Impact The notification gateway&#39;s JWT handshake joined a client-supplied organization identifier to the corresponding notification room without verifying that the authenticated user was a member of that organization. As a result, an authenticated user could receive another organization&#39;s realtime sandbox, snapshot, volume, and runner events, including data carried in those events. This is a cross-tenant confidentiality break. It required a valid account and knowledge of the target organization id (a non-secret UUID); no elevated privileges were needed. The API-key authentication path was not affected.</p> <p>The affected component is the Daytona API service (the `apps/api` NestJS application). It is distributed through Daytona&#39;s repository releases and container images for self-hosted deployments; it is not published as a Go or npm package, so the advisory will not surface through `go get` or npm dependency tooling.</p> <p>### Affected Versions &gt;= 0.101.0, &lt;= 0.184.0</p> <p>### Patched Versions 0.185.0</p> <p>### Credit @vnth4nhnt from CyStack</p> <p><strong>Affected:</strong> Go: github.com/daytonaio/daytona</p> <p>### Summary A cross-tenant authorization flaw in Daytona&#39;s notification WebSocket gateway allowed any authenticated user to subscribe to another organization&#39;s realtime notification channel and passively receive that organization&#39;s events.</p> <p>### Impact The notification gateway&#39;s JWT handshake joined a client-supplied organization identifier to the corresponding notification room without verifying that the authenticated user was a member of that organization. As a result, an authenticated user could receive another organization&#39;s realtime sandbox, snapshot, volume, and runner events, including data carried in those events. This is a cross-tenant confidentiality break. It required a valid account and knowledge of the target organization id (a non-secret UUID); no elevated privileges were needed. The API-key authentication path was not affected.</p> <p>The affected component is the Daytona API service (the `apps/api` NestJS application). It is distributed through Daytona&#39;s repository releases and container images for self-hosted deployments; it is not published as a Go or npm package, so the advisory will not surface through `go get` or npm dependency tooling.</p> <p>### Affected Versions &gt;= 0.101.0, &lt;= 0.184.0</p> <p>### Patched Versions 0.185.0</p> <p>### Credit @vnth4nhnt from CyStack</p> https://cve.radiocsirt.org/vuln/ghsa-qwxf-2m7m-2m3x