Daytonaio vulnerabilities
Products
- Daytona 6
Newest
- daytonaio daytona Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email 8.4 High
- daytonaio daytona Daytona: Git credential leak via git clone with TLS verification disabled 5.9 Medium
- daytonaio daytona Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape 4.2 Medium
- daytonaio daytona Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join 6.5 Medium
- daytonaio daytona Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles 7.7 High
- daytonaio daytona Daytona: Public sandbox previews remain accessible for up to one hour after being made private 7.0 High