Descrição
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona-s notification WebSocket gateway allowed any authenticated user to subscribe to another organization-s realtime notification channel and passively receive that organization-s events. This vulnerability is fixed in 0.185.0.
CVSS 6.5EPSS 0.27499999999999997%Risco 0.67
Ver fonte- Publicação
- 2026-06-23 18:18:09
- Versões afetadas
- <0.185.0
- Tipo
- Software crítico
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N