Daytonaio vulnerabilities
We track 3 vulnerabilities in Daytonaio products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 23, 2026.
Latest Daytonaio vulnerabilities
- 7.7 High severity
daytona: Authorization Bypass Through User-Controlled Key
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request pat
- 7.0 High severity
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and…
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private could remain reachable without authentication for a short period
- 8.4 High severity
daytona: Improper Authentication
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted (and declined) by a user whose email matched the invitation but had not been verified. Dayt