# CVE-2026-54320: Daytona improper authentication in organization invitation acceptance

Source: https://junglewise.ai/threats/cve-2026-54320-daytona-improper-authentication-in-organization-invitation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-23. Updated: 2026-06-23  
License: CC BY 4.0 with a link back

CVE-2026-54320 · Severity: high · CVSS 8.4 · Published 2026-06-23

Daytona is a platform used to run AI-generated code and manage automated workflows. A security flaw allowed unauthorized individuals to join a business organization by claiming an email address that had a pending invitation, even if they couldn't prove they owned that email. This could allow an attacker to gain full control over a company's workspace, access sensitive configurations, and manage other members if they successfully hijack an invitation intended for a legitimate user.

Technologies: [Daytona](https://junglewise.ai/threats/technologies/daytona). Vendors: [Daytona](https://junglewise.ai/threats/vendors/daytona).

## Quick answers

**Is CVE-2026-54320 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-54320 being exploited in the wild.

**How severe is CVE-2026-54320?** High severity, with a CVSS score of 8.4, published 23 June 2026.

**Which products and versions are affected?** Daytona < 0.184.0.

**Is there a fix for CVE-2026-54320?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-54320 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-54320?** Check whether you run Daytona at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability in Daytona's OIDC authentication flow allowed users to accept or decline organization invitations using unverified email addresses. While Daytona matches the invitation's target email against the email in the caller's OIDC token, it failed to enforce an 'email_verified' check on the invitation acceptance path. If an identity provider allows self-service signup and issues sessions before verification, an attacker could register an account with a target's email address and accept a pending invitation. This allows the attacker to join the organization with the role specified in the invitation, potentially up to 'Owner' level. The issue is resolved in version 0.184.0 by requiring verified emails for invitation endpoints.

## Affected products

- daytonaio Daytona < 0.184.0

## Timeline

- 2026-06-05: advisory: GitHub advisory published by vendor
- 2026-06-23: disclosed: CVE published to NVD

## References

- [https://github.com/daytonaio/daytona/security/advisories/GHSA-m6hx-cffh-3f3h](https://github.com/daytonaio/daytona/security/advisories/GHSA-m6hx-cffh-3f3h)

## Related threats

- [Daytona IDOR in organization role update and delete endpoints](https://junglewise.ai/threats/cve-2026-54322-daytona-idor-in-organization-role-update-and-delete-endpoints)
- [Daytona incorrect authorization in sandbox preview proxy](https://junglewise.ai/threats/cve-2026-54321-daytona-incorrect-authorization-in-sandbox-preview-proxy)
- [Daytona path traversal in sandbox volume host mount construction](https://junglewise.ai/threats/cve-2026-54319-daytona-path-traversal-in-sandbox-volume-host-mount-construction)
- [Daytona cross-tenant authorization bypass in notification WebSocket gateway](https://junglewise.ai/threats/cve-2026-54324-daytona-cross-tenant-authorization-bypass-in-notification)
- [Daytonaio Daytona improper TLS certificate validation in git clone](https://junglewise.ai/threats/cve-2026-54323-daytonaio-daytona-improper-tls-certificate-validation-in-git)