CVE-2026-54321

7.0 Élevée

Publiée le 23/06/2026 à 21:17 · Modifiée le 25/06/2026 à 15:16 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private could remain reachable without authentication for a short period after the change, due to a cached visibility state that was not invalidated when the sandbox's visibility changed. This vulnerability is fixed in 0.184.0.

Traduire en français

Produits concernés

daytonaio daytona

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.0 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L`

Faiblesses (CWE)

CWE-613
CWE-863

Références

https://github.com/daytonaio/daytona/security/advisories/GHSA-ww63-pv5x-vfc8

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories