CVE-2026-54319 — Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access…

CVE-2026-54319

Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape PUBLISHED

Description (CNA)

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be a volume name) was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volume base directory. This vulnerability is fixed in 0.186.

Affected (CNA)

Vendor / product	Versions
daytonaio / daytona	affected < 0.186

CWE

CWE-22, CWE-250, CWE-269

References

https://github.com/daytonaio/daytona/security/advisories/GHSA-fjv8-j4p5-cr9m

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.