Coding assistants

Prior to 0.185.0, Daytona's organization role update and delete endpoints checked that the caller owned the organization in the request path, but located the target role by identifier alone. An authenticated user who owns any organization could modify or delete a role belonging to a different organization if they knew that role's identifier. The flaw is tracked as CVE-2026-54322.

CVE-2026-54321 affects Daytona from 0.101.0 until 0.184.0. Sandbox previews switched from public to private could stay reachable without authentication for a short period, because a cached visibility state was not invalidated when the sandbox's visibility changed. The weakness is classified as CWE-613 (Insufficient Session Expiration) and CWE-863 (Incorrect Authorization).

CVE-2026-54320 affects Daytona, an infrastructure runtime for AI-generated code execution and agent workflows, prior to 0.184.0. The organization invitation accept and decline paths did not require the matching email to be verified, although organization creation did. On identity providers that allow self-service signup and issue a session before email verification, an actor could register an unverified address matching a pending invitation, accept it, and join the target organization with the invitation's role, up to Owner.

CVE-2026-45482 is a path traversal flaw (CWE-22) in GitHub Copilot and Visual Studio Code. The source says it allows an unauthorized attacker to bypass a security feature locally. NIST has not yet provided an NVD assessment, and Microsoft Corporation is the listed source.

CVE-2026-45497 is a command injection flaw (CWE-77) in Microsoft Copilot, classified as Improper Neutralization of Special Elements used in a Command. The source says an authorized attacker can execute code over a network. NVD has not yet provided an assessment, and the record was published and last modified on 06/04/2026.

A flaw in GitHub Copilot CLI before 1.0.43 allows arbitrary code execution when the agent runs git operations inside a project containing a malicious nested bare git repository. Git's automatic bare repository discovery during directory traversal lets an attacker set core.fsmonitor or other executable config keys, such as core.hookspath, diff.external and merge.tool, which git runs during status, diff or rev-parse without user awareness or approval.

CVE-2026-42893 is classified as CWE-77, Improper Neutralization of Special Elements used in a Command ('Command Injection'), in M365 Copilot. The source states that an unauthorized attacker can perform tampering over a network. NVD had not yet provided an assessment at the time of the record.

CVE-2026-41109 is an improper neutralization of special elements in output used by a downstream component ('injection'), classified as CWE-74, in GitHub Copilot and Visual Studio. The source states that an unauthorized attacker can bypass a security feature over a network. NVD published the entry on 05/12/2026, and NIST has not yet provided an assessment.

CVE-2026-33111 is a command injection flaw (CWE-77) in Copilot Chat for Microsoft Edge. Per the source, an unauthorized attacker can exploit it over a network to disclose information. NIST has not yet provided an NVD assessment, and the entry was published and last modified on 05/07/2026.

CVE-2026-26164 is an improper neutralization of special elements in output used by a downstream component ('injection'), classified as CWE-74, in M365 Copilot. The source states that an unauthorized attacker can disclose information over a network. NVD has not yet provided an assessment, and the record was published and last modified on 05/07/2026.