CVE-2026-54320

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-54320", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-12T18:42:02.223Z", "datePublished": "2026-06-23T18:11:19.369Z", "dateUpdated": "2026-06-24T14:28:38.501Z"}, "containers": {"cna": {"title": "Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email", "problemTypes": [{"descriptions": [{"cweId": "CWE-287", "lang": "en", "description": "CWE-287: Improper Authentication", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-863", "lang": "en", "description": "CWE-863: Incorrect Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/daytonaio/daytona/security/advisories/GHSA-m6hx-cffh-3f3h", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/daytonaio/daytona/security/advisories/GHSA-m6hx-cffh-3f3h"}], "affected": [{"vendor": "daytonaio", "product": "daytona", "versions": [{"version": "< 0.184.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-23T18:11:19.369Z"}, "descriptions": [{"lang": "en", "value": "Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted (and declined) by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and matches an invitation's target email against the email in the caller's token, but the invitation accept and decline paths did not require that email to be verified, unlike organization creation, which already enforced verification. On identity providers that allow self-service signup and issue a session before the email is verified, an actor could register an address matching a pending invitation, leave it unverified, and accept the invitation, joining the target organization with the role the invitation carried (up to Owner). This vulnerability is fixed in 0.184.0."}], "source": {"advisory": "GHSA-m6hx-cffh-3f3h", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-24T14:28:12.345394Z", "id": "CVE-2026-54320", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-24T14:28:38.501Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-54320", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-24T14:28:12.345394Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-24T14:28:19.496Z"}}], "cna": {"title": "Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email", "source": {"advisory": "GHSA-m6hx-cffh-3f3h", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "daytonaio", "product": "daytona", "versions": [{"status": "affected", "version": "< 0.184.0"}]}], "references": [{"url": "https://github.com/daytonaio/daytona/security/advisories/GHSA-m6hx-cffh-3f3h", "name": "https://github.com/daytonaio/daytona/security/advisories/GHSA-m6hx-cffh-3f3h", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted (and declined) by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and matches an invitation's target email against the email in the caller's token, but the invitation accept and decline paths did not require that email to be verified, unlike organization creation, which already enforced verification. On identity providers that allow self-service signup and issue a session before the email is verified, an actor could register an address matching a pending invitation, leave it unverified, and accept the invitation, joining the target organization with the role the invitation carried (up to Owner). This vulnerability is fixed in 0.184.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "CWE-287: Improper Authentication"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863: Incorrect Authorization"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-23T18:11:19.369Z"}}}, "cveMetadata": {"cveId": "CVE-2026-54320", "state": "PUBLISHED", "dateUpdated": "2026-06-24T14:28:38.501Z", "dateReserved": "2026-06-12T18:42:02.223Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-23T18:11:19.369Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "daytona", "vendor": "daytonaio", "versions": [{"status": "affected", "version": "< 0.184.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted (and declined) by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and matches an invitation's target email against the email in the caller's token, but the invitation accept and decline paths did not require that email to be verified, unlike organization creation, which already enforced verification. On identity providers that allow self-service signup and issue a session before the email is verified, an actor could register an address matching a pending invitation, leave it unverified, and accept the invitation, joining the target organization with the role the invitation carried (up to Owner). This vulnerability is fixed in 0.184.0."}, {"lang": "es", "value": "Daytona es un entorno de ejecuci\u00f3n de infraestructura seguro y el\u00e1stico para la ejecuci\u00f3n de c\u00f3digo generado por IA y flujos de trabajo de agentes. Antes de la versi\u00f3n 0.184.0, las invitaciones de organizaci\u00f3n pod\u00edan ser aceptadas (y rechazadas) por un usuario cuyo correo electr\u00f3nico coincid\u00eda con la invitaci\u00f3n pero no hab\u00eda sido verificado. Daytona autentica a los usuarios a trav\u00e9s de OIDC y compara el correo electr\u00f3nico de destino de una invitaci\u00f3n con el correo electr\u00f3nico en el token del llamante, pero las rutas de aceptaci\u00f3n y rechazo de la invitaci\u00f3n no requer\u00edan que ese correo electr\u00f3nico fuera verificado, a diferencia de la creaci\u00f3n de organizaciones, que ya aplicaba la verificaci\u00f3n. En proveedores de identidad que permiten el registro de autoservicio y emiten una sesi\u00f3n antes de que el correo electr\u00f3nico sea verificado, un actor podr\u00eda registrar una direcci\u00f3n que coincidiera con una invitaci\u00f3n pendiente, dejarla sin verificar y aceptar la invitaci\u00f3n, uni\u00e9ndose a la organizaci\u00f3n de destino con el rol que conllevaba la invitaci\u00f3n (hasta Propietario). Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 0.184.0."}], "id": "CVE-2026-54320", "lastModified": "2026-10-25T23:10:00.167", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 6.0, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54320", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-24T14:28:12.345394Z", "version": "2.0.3"}}]}, "published": "2026-06-23T19:17:07.993", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/daytonaio/daytona/security/advisories/GHSA-m6hx-cffh-3f3h"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}, {"lang": "en", "value": "CWE-863"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.184.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "daytona", "source": "cna", "vendor": "daytonaio"}, "product": "daytona", "vendor": "daytonaio"}], "created": "2026-06-23T21:15:07.552254+00:00", "updated": "2026-06-24T16:05:46.428133+00:00", "vendors": ["daytonaio", "daytonaio$PRODUCT$daytona"]}