{"data":{"id":"9ea7a4a4-b0e2-4df9-b7d9-251371dfc007","title":"CVE-2026-54322: Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to…","summary":"Prior to 0.185.0, Daytona's organization role update and delete endpoints checked that the caller owned the organization in the request path, but located the target role by identifier alone. An authenticated user who owns any organization could modify or delete a role belonging to a different organization if they knew that role's identifier. The flaw is tracked as CVE-2026-54322.","solution":"Fixed in 0.185.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-54322","publishedAt":"2026-06-23T19:17:08.370Z","cveId":"CVE-2026-54322","cweIds":["CWE-639","CWE-862"],"cvssScore":"7.7","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/daytonaio/daytona@<= 0.184.0 (fixed: 0.185.0)"],"affectedPackageNames":["github.com/daytonaio/daytona"],"affectedPackageRefs":["go:github.com/daytonaio/daytona"],"affectedVendors":[],"affectedVendorsRaw":["Daytona"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Daytona role update and delete endpoints allow cross-organization changes","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00304,"epssCheckedAt":"2026-11-09T18:09:53.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-qxvm-pcfm-qc39"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:31.041Z","patchAvailable":true,"disclosureDate":"2026-06-23T19:17:08.370Z","fixReleasedAt":"2026-06-09T08:19:03.000Z","daysToFix":-14,"fixCheckedAt":"2026-10-29T21:33:51.898Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"go","name":"github.com/daytonaio/daytona","fixedVersion":"0.185.0","matchedVersion":"v0.185.0","fixReleasedAt":"2026-06-09T08:19:03.000Z","daysToFix":-14,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:33:51.751Z"}]}}