EUVD-2026-38562
GHSA-qwxf-2m7m-2m3x
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Network-accessible WebSocket endpoint; PR:L because valid JWT required; C:H for cross-tenant event data exposure; no integrity or availability impact.
Primary rating from Vendor (https://github.com/daytonaio/daytona).
CVSS VectorVendor: https://github.com/daytonaio/daytona
Lifecycle Timeline
2DescriptionCVE.org
Summary
A cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user to subscribe to another organization's realtime notification channel and passively receive that organization's events.
Impact
The notification gateway's JWT handshake joined a client-supplied organization identifier to the corresponding notification room without verifying that the authenticated user was a member of that organization. As a result, an authenticated user could receive another organization's realtime sandbox, snapshot, volume, and runner events, including data carried in those events. This is a cross-tenant confidentiality break. It required a valid account and knowledge of the target organization id (a non-secret UUID); no elevated privileges were needed. The API-key authentication path was not affected.
The affected component is the Daytona API service (the apps/api NestJS application). It is distributed through Daytona's repository releases and container images for self-hosted deployments; it is not published as a Go or npm package, so the advisory will not surface through go get or npm dependency tooling.
Affected Versions
>= 0.101.0, <= 0.184.0
Patched Versions
0.185.0
Credit
@vnth4nhnt from CyStack
AnalysisAI
Cross-tenant confidentiality breach in Daytona's notification WebSocket gateway (versions 0.101.0 through 0.184.0) allows any JWT-authenticated user to passively receive realtime event data belonging to a different organization by supplying an arbitrary organization UUID during the WebSocket handshake. The gateway's JWT authentication flow accepted the client-supplied organizationId and joined the corresponding notification room without verifying organizational membership, exposing sandbox, snapshot, volume, and runner events across tenant boundaries. No active exploitation has been confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis, but the attack is mechanically trivial for any authenticated user who can obtain a target organization's UUID.
Technical ContextAI
The vulnerable component is the Daytona API service implemented as a NestJS application (apps/api), which exposes a WebSocket notification gateway for realtime event delivery. During connection establishment, the gateway performs a JWT handshake and uses a client-supplied organization identifier to subscribe the connecting client to a Socket.IO-style notification room. CWE-639 (Authorization Bypass Through User-Controlled Key) precisely characterizes the root cause: the server trusted the user-provided organizationId as the room subscription key without performing a server-side membership check to confirm the authenticated principal belonged to that organization. The affected product is distributed exclusively as container images and binary releases via GitHub for self-hosted deployments; it is not published as a standalone Go module or npm package, meaning standard dependency scanning tools (go get, npm audit) will not surface this advisory. The CPE identifier is pkg:go/github.com/daytonaio/daytona. Notably, the API-key authentication path does not share this code path and is not affected.
RemediationAI
Upgrade to Daytona 0.185.0, which introduces server-side organizational membership validation during the WebSocket JWT handshake, preventing unauthorized cross-tenant room subscriptions. Patched releases and updated container images are available via the Daytona GitHub repository; the advisory at https://github.com/daytonaio/daytona/security/advisories/GHSA-qwxf-2m7m-2m3x provides authoritative patch confirmation. If immediate upgrade is not feasible, restrict WebSocket gateway access to trusted internal network segments or VPN-only connectivity, accepting the trade-off of reduced realtime notification availability for remote clients. Organizations can also audit existing WebSocket connection logs for anomalous organizationId values in subscription requests to assess whether exploitation has been attempted. Single-tenant deployments have no cross-tenant exposure and face lower urgency, though upgrade remains the recommended action.
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could
FortiOS and FortiProxy contain an authentication bypass via the Node.js websocket module allowing unauthenticated remote
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for t
Flowise version 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig paramete
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was inc
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Rated critical severity (CVSS 9.8), this vulner
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary fi
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwin
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, whic
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a
Same technique Authentication Bypass
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today