6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-54324

CVE-2026-54324: Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user to subscribe to another organization's realtime notification channel and passively receive that organization's events. This vulnerability is fixed in 0.185.0.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-54324

CVE-2026-54324:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/daytonaio/daytona	go	<= 0.184.0	0.185.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the NotificationGateway's handleConnection method, which is responsible for handling new WebSocket connections. The vulnerability description states that a cross-tenant authorization flaw allowed any authenticated user to subscribe to another organization's notification channel. This is confirmed by analyzing the patch in commit 53b2460f468598312a927475c227188d7ce13f41. Before the patch, the code would accept a client-supplied organizationId from the WebSocket handshake and join the client to the corresponding notification room without verifying if the authenticated user (identified by payload.sub from the JWT) was actually a member of that organization. The patch introduces a check using this.organizationUserService.exists(organizationId, payload.sub) to validate the user's membership in the organization before allowing them to join the notification room. This directly mitigates the described vulnerability.

Vulnerable functions

NotificationGateway.handleConnection

apps/api/src/notification/gateways/notification.gateway.ts

The `handleConnection` function in the `NotificationGateway` class was vulnerable to a cross-tenant data leak. It allowed authenticated users to subscribe to the notification channel of any organization by supplying an arbitrary `organizationId` in the WebSocket handshake query. The function did not verify if the authenticated user was a member of the specified organization before joining them to the organization's notification room. This allowed an attacker to passively receive real-time events and sensitive data from other organizations.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.