Περιγραφή
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona-s notification WebSocket gateway allowed any authenticated user to subscribe to another organization-s realtime notification channel and passively receive that organization-s events. This vulnerability is fixed in 0.185.0.
CVSS 6.5EPSS 0.27499999999999997%Κίνδυνος 0.67
Προβολή πηγής- Δημοσίευση
- 2026-06-23 18:18:09
- Επηρεαζόμενες εκδόσεις
- <0.185.0
- Τύπος
- Κρίσιμο λογισμικό
- Διάνυσμα
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N