Go/github.com/daytonaio/daytona CVE-2026-54324: unknown, EPSS 0.46%

Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join in github.com/daytonaio/daytona

Action: Upgrade github.com/daytonaio/daytona to 0.185.0 or later.

go get github.com/daytonaio/daytona@v0.185.0

Affected

Fixed versions

Sources

• osv: GO-2026-5598
• https://github.com/daytonaio/daytona/security/advisories/GHSA-qwxf-2m7m-2m3x

CVE-2026-54324 · published 2026-06-25T22:34:34Z · modified 2026-06-25T23:01:24.164517115Z · JSON