CVE-2026-54320: Daytona organization invitation acceptance without verified email

Summary

CVE-2026-54320 affects Daytona, an infrastructure runtime for AI-generated code execution and agent workflows, prior to 0.184.0. The organization invitation accept and decline paths did not require the matching email to be verified, although organization creation did. On identity providers that allow self-service signup and issue a session before email verification, an actor could register an unverified address matching a pending invitation, accept it, and join the target organization with the invitation's role, up to Owner.

Mitigation

Fixed in 0.184.0.

Topics

• Coding assistants

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News