7

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-54321

CVE-2026-54321: Daytona: Public sandbox previews remain accessible for up to one hour after being made private

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private could remain reachable without authentication for a short period after the change, due to a cached visibility state that was not invalidated when the sandbox's visibility changed. This vulnerability is fixed in 0.184.0.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-54321

CVE-2026-54321:

7

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/daytonaio/daytona	go	>= 0.101.0, <= 0.183.0	0.184.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is an incorrect authorization issue stemming from a stale cache. When a user changed a sandbox preview from public to private, the API failed to invalidate a cached entry in Redis that stored the sandbox's public visibility status. As a result, the proxy, which relied on this cache, would continue to serve the sandbox preview without authentication for up to an hour (the cache's TTL). The patch rectifies this by introducing an event-driven mechanism. When a sandbox's visibility is changed, a PUBLIC_STATUS_UPDATED event is now fired. The ProxyCacheInvalidationService listens for this event and triggers the handleSandboxPublicStatusUpdated function, which in turn calls invalidatePublicCache to delete the stale entry from Redis immediately. The vulnerability was the absence of this invalidation logic.

Vulnerable functions

ProxyCacheInvalidationService.handleSandboxPublicStatusUpdated

apps/api/src/sandbox/services/proxy-cache-invalidation.service.ts

This function was added as part of the fix. It's an event handler that gets triggered when a sandbox's public status is updated. Its absence was the core of the vulnerability, as there was no mechanism to invalidate the cache upon a visibility change.

ProxyCacheInvalidationService.invalidatePublicCache

apps/api/src/sandbox/services/proxy-cache-invalidation.service.ts

This function contains the logic to delete the cached public status of a sandbox from Redis. The vulnerability existed because this cache invalidation step was never performed when a sandbox was made private, allowing the proxy to serve it based on stale information.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.