# CVE-2026-54324: Daytona cross-tenant authorization bypass in notification WebSocket gateway

Source: https://junglewise.ai/threats/cve-2026-54324-daytona-cross-tenant-authorization-bypass-in-notification  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-23. Updated: 2026-06-23  
License: CC BY 4.0 with a link back

CVE-2026-54324 · Severity: medium · CVSS 6.5 · Published 2026-06-23

Daytona is an infrastructure platform used to manage and execute AI-generated code and agent workflows. A security flaw in the platform's notification system allowed any logged-in user to eavesdrop on the real-time activity of other organizations. By exploiting this, an attacker could monitor sensitive events such as sandbox and snapshot updates belonging to other customers, potentially leading to the exposure of private operational data.

Technologies: [Daytona](https://junglewise.ai/threats/technologies/daytona), [github.com/daytonaio/daytona (Go)](https://junglewise.ai/threats/technologies/github-com-daytonaio-daytona). Vendors: [Daytona](https://junglewise.ai/threats/vendors/daytona), [Go](https://junglewise.ai/threats/vendors/go).

## Quick answers

**Is CVE-2026-54324 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-54324 being exploited in the wild.

**How severe is CVE-2026-54324?** Medium severity, with a CVSS score of 6.5, published 23 June 2026.

**Which products and versions are affected?** Daytona >= 0.101.0, < 0.185.0, >= 0.101.0, <= 0.184.0; github.com/daytonaio/daytona (Go) <= 0.184.0, SEMVER:introduced=0,fixed=0.185.0.

**Is there a fix for CVE-2026-54324?** Yes. github.com/daytonaio/daytona (Go): upgrade to 0.185.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-54324 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-54324?** Check whether you run Daytona or github.com/daytonaio/daytona (Go) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- github.com/daytonaio/daytona (Go): upgrade to 0.185.0 or later

  ```sh
  go get github.com/daytonaio/daytona@v0.185.0
  ```


## Technical details

A cross-tenant authorization vulnerability (CWE-639/CWE-863) exists in the Daytona API service's notification WebSocket gateway. During the JWT handshake process, the gateway joined clients to notification 'rooms' based on a user-supplied organization ID without verifying the user's membership in that organization. An authenticated attacker with knowledge of a target organization's UUID could subscribe to their real-time event stream. This exposure includes sandbox, snapshot, volume, and runner events. The vulnerability affects self-hosted deployments (NestJS API application) but does not impact the API-key authentication path. A fix is available in version 0.185.0.

## Affected products

- Daytona Daytona >= 0.101.0, < 0.185.0

## Identifiers

- CVE-2026-54324
- GHSA-qwxf-2m7m-2m3x
- GO-2026-5598

## Timeline

- 2026-06-16: advisory: GitHub Security Advisory published
- 2026-06-23: disclosed: NVD publication date

## References

- [https://github.com/daytonaio/daytona/security/advisories/GHSA-qwxf-2m7m-2m3x](https://github.com/daytonaio/daytona/security/advisories/GHSA-qwxf-2m7m-2m3x)

## Related threats

- [Daytona IDOR in organization role update and delete endpoints](https://junglewise.ai/threats/cve-2026-54322-daytona-idor-in-organization-role-update-and-delete-endpoints)
- [Daytona incorrect authorization in sandbox preview proxy](https://junglewise.ai/threats/cve-2026-54321-daytona-incorrect-authorization-in-sandbox-preview-proxy)
- [Daytona improper authentication in organization invitation acceptance](https://junglewise.ai/threats/cve-2026-54320-daytona-improper-authentication-in-organization-invitation)
- [Daytona path traversal in sandbox volume host mount construction](https://junglewise.ai/threats/cve-2026-54319-daytona-path-traversal-in-sandbox-volume-host-mount-construction)
- [Daytonaio Daytona improper TLS certificate validation in git clone](https://junglewise.ai/threats/cve-2026-54323-daytonaio-daytona-improper-tls-certificate-validation-in-git)