### Summary Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request path, but resolved and mutated the target role by its identifier alone, without verifying the role belonged to that organization. An authenticated user who owns any organization (organizations are self-service) could therefore modify the permissions of, or delete, a role belonging to a different organization, given that role's identifier. ### Impact This is a cross-tenant broken access control (IDOR) issue affecting multi-tenant deployments, including the managed Daytona platform. Using a target role's identifier, an attacker with owner rights over their own organization could: - Overwrite the target role's name and permission set, escalating or stripping privileges for every member and API key in the victim organization that holds that role. - Delete the target role, removing the associated permissions from its holders. - Observe the victim role's current permission set returned in the update response (limited information disclosure). Exploitation requires knowledge of the target role's identifier, which is not enumerable across organizations and is not exposed to non-members through the API. ### Affected versions All versions up to and including 0.184.0. ### Patches Fixed in 0.185.0. The role update, delete, and role-assignment lookups are now scoped to the caller's organization, so a role belonging to another organization resolves to "not found" before any read or mutation. The managed Daytona platform was updated on release of 0.185.0. ### Workarounds None. Upgrade to 0.185.0. Single-organization self-hosted deployments are not exploitable, as the issue requires a second organization to target. ### Credit Reported by @vnth4nhnt.
### Summary Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request path, but resolved and mutated the target role by its identifier alone, without verifying the role belonged to that organization. An authenticated user who owns any organization (organizations are self-service) could therefore modify the permissions of, or delete, a role belonging to a different organization, given that role's identifier. ### Impact This is a cross-tenant broken access control (IDOR) issue affecting multi-tenant deployments, including the managed Daytona platform. Using a target role's identifier, an attacker with owner rights over their own organization could: - Overwrite the target role's name and permission set, escalating or stripping privileges for every member and API key in the victim organization that holds that role. - Delete the target role, removing the associated permissions from its holders. - Observe the victim role's current permission set returned in the update response (limited information disclosure). Exploitation requires knowledge of the target role's identifier, which is not enumerable across organizations and is not exposed to non-members through the API. ### Affected versions All versions up to and including 0.184.0. ### Patches Fixed in 0.185.0. The role update, delete, and role-assignment lookups are now scoped to the caller's organization, so a role belonging to another organization resolves to "not found" before any read or mutation. The managed Daytona platform was updated on release of 0.185.0. ### Workarounds None. Upgrade to 0.185.0. Single-organization self-hosted deployments are not exploitable, as the issue requires a second organization to target. ### Credit Reported by @vnth4nhnt.
Update github.com/daytonaio/daytona to 0.185.0 if you use the affected versions. Test the change in a non-production environment first.
Local check
hol-guard supply-chain scanDaytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles affects github.com/daytonaio/daytona (go). Severity is high. ### Summary Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request path, but resolved and mutated the target role by its identifier alone, without verifying the role belonged to that organization. An authenticated user who owns any organization (organizations are self-service) could therefore modify the permissions of, or delete, a role belonging to a different organization, given that role's identifier. ### Impact This is a cross-tenant broken access control (IDOR) issue affecting multi-tenant deployments, including the managed Daytona platform. Using a target role's identifier, an attacker with owner rights over their own organization could: - Overwrite the target role's name and permission set, escalating or stripping privileges for every member and API key in the victim organization that holds that role. - Delete the target role, removing the associated permissions from its holders. - Observe the victim role's current permission set returned in the update response (limited information disclosure). Exploitation requires knowledge of the target role's identifier, which is not enumerable across organizations and is not exposed to non-members through the API. ### Affected versions All versions up to and including 0.184.0. ### Patches Fixed in 0.185.0. The role update, delete, and role-assignment lookups are now scoped to the caller's organization, so a role belonging to another organization resolves to "not found" before any read or mutation. The managed Daytona platform was updated on release of 0.185.0. ### Workarounds None. Upgrade to 0.185.0. Single-organization self-hosted deployments are not exploitable, as the issue requires a second organization to target. ### Credit Reported by @vnth4nhnt.
AI coding agents often install or upgrade packages automatically in go. A high vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.
| Package | Affected range | Fixed version |
|---|---|---|
| github.com/daytonaio/daytonago | <=0.184.0 | 0.185.0 |
Fixed versions are reported by the source feed; confirm compatibility before updating.
Reported by GitHub Security Advisories (ghsa).
HOL Guard can help your team review package activity against supported protection paths.
Explore HOL GuardUpdate github.com/daytonaio/daytona to 0.185.0 if you use the affected versions. Test the change in a non-production environment first.
Local check
hol-guard supply-chain scanDaytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles affects github.com/daytonaio/daytona (go). Severity is high. ### Summary Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request path, but resolved and mutated the target role by its identifier alone, without verifying the role belonged to that organization. An authenticated user who owns any organization (organizations are self-service) could therefore modify the permissions of, or delete, a role belonging to a different organization, given that role's identifier. ### Impact This is a cross-tenant broken access control (IDOR) issue affecting multi-tenant deployments, including the managed Daytona platform. Using a target role's identifier, an attacker with owner rights over their own organization could: - Overwrite the target role's name and permission set, escalating or stripping privileges for every member and API key in the victim organization that holds that role. - Delete the target role, removing the associated permissions from its holders. - Observe the victim role's current permission set returned in the update response (limited information disclosure). Exploitation requires knowledge of the target role's identifier, which is not enumerable across organizations and is not exposed to non-members through the API. ### Affected versions All versions up to and including 0.184.0. ### Patches Fixed in 0.185.0. The role update, delete, and role-assignment lookups are now scoped to the caller's organization, so a role belonging to another organization resolves to "not found" before any read or mutation. The managed Daytona platform was updated on release of 0.185.0. ### Workarounds None. Upgrade to 0.185.0. Single-organization self-hosted deployments are not exploitable, as the issue requires a second organization to target. ### Credit Reported by @vnth4nhnt.
AI coding agents often install or upgrade packages automatically in go. A high vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.
| Package | Affected range | Fixed version |
|---|---|---|
| github.com/daytonaio/daytonago | <=0.184.0 | 0.185.0 |
Fixed versions are reported by the source feed; confirm compatibility before updating.
Reported by GitHub Security Advisories (ghsa).
HOL Guard can help your team review package activity against supported protection paths.
Explore HOL Guard