{"id":"EUVD-2026-38564","enisaUuid":"abd29f4e-f01b-38c2-ac17-fa4b237c3e7c","description":"Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be a volume name) was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volume base directory. This vulnerability is fixed in 0.186.","datePublished":"Jun 23, 2026, 6:08:54 PM","dateUpdated":"Jun 24, 2026, 1:36:34 PM","baseScore":4.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","references":"https://github.com/daytonaio/daytona/security/advisories/GHSA-fjv8-j4p5-cr9m\n","aliases":"CVE-2026-54319\nGHSA-fjv8-j4p5-cr9m\n","assigner":"GitHub_M","epss":0.24,"enisaIdProduct":[{"id":"67604076-05f8-335d-8610-48d4d200b466","product":{"name":"daytona","vendor":{"name":"daytonaio"}},"product_version":"\u003c 0.186"}],"enisaIdVendor":[{"id":"79f90fd8-a4af-38bd-9a2a-a0940337bb6c","vendor":{"name":"daytonaio"}}],"enisaIdVulnerability":[{"id":"17d05f1d-9bde-307a-be64-eb9aff8587a7","vulnerability":{"id":"GHSA-fjv8-j4p5-cr9m","description":"Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape","datePublished":"Jun 18, 2026, 5:19:51 PM","dateUpdated":"Jul 20, 2026, 9:15:16 PM","baseScore":0.0,"references":"https://github.com/daytonaio/daytona/security/advisories/GHSA-fjv8-j4p5-cr9m\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-54319\nhttps://github.com/daytonaio/daytona\n","enisa_id":"EUVD-2026-38564\n","aliases":"CVE-2026-54319\nGHSA-fjv8-j4p5-cr9m\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"18ea0228-e5ec-3831-973d-e17fb584d3f6","vulnerability":{"id":"CVE-2026-54319","description":"Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be a volume name) was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volume base directory. This vulnerability is fixed in 0.186.","datePublished":"Jun 23, 2026, 6:08:54 PM","dateUpdated":"Jun 24, 2026, 1:36:34 PM","status":"PUBLISHED","baseScore":4.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","references":"https://github.com/daytonaio/daytona/security/advisories/GHSA-fjv8-j4p5-cr9m\n","enisa_id":"EUVD-2026-38564\n","assigner":"GitHub_M","epss":0.24,"dataProcessed":"Nov 7, 2026, 7:20:27 AM","vulnerabilityProduct":[{"id":"915a5c0a-af47-33d6-9a86-a4ee9c7241c1","product":{"name":"daytona","vendor":{"name":"daytonaio"}},"product_version":"\u003c 0.186"}],"vulnerabilityVendor":[{"id":"b6b9db15-fe39-32ce-a01c-22b41ddc10db","vendor":{"name":"daytonaio"}}]}}],"enisaIdAdvisory":[]}