Daytonaio Daytona vulnerabilities
- daytonaio daytonaDaytona: Cross-tenant organization takeover via invitation acceptance with an unverified email8.4 High
- daytonaio daytonaDaytona: Git credential leak via git clone with TLS verification disabled5.9 Medium
- daytonaio daytonaDaytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape4.2 Medium
- daytonaio daytonaDaytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join6.5 Medium
- daytonaio daytonaDaytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles7.7 High
- daytonaio daytonaDaytona: Public sandbox previews remain accessible for up to one hour after being made private7.0 High