Daytona is a secure, elastic infrastructure runtime for AI-generated code execution and agent workflows. In versions 0.101.0 through 0.184.0, sandbox previews that were switched from public to private could remain reachable without authentication for up to an hour, because a cached visibility state was not invalidated after the visibility change. This flaw allows an attacker to view data that should have been private, constituting unauthorized access and information disclosure; the issue aligns with CWE-613 and CWE-863.

DaytonaIO’s Daytona product versions from 0.101.0 through 0.184.0 inclusive are impacted; the vulnerability is fixed in 0.184.0.

The CVSS score of 7 indicates a medium‑to‑high severity. EPSS is not available and the vulnerability is not listed in KEV. The attack vector is inferred to be remote via the sandbox preview URL, where an adversary can retrieve sensitive content after a visibility change has not yet been fully enforced. The risk lies in accidental or intentional disclosure of data that should have been private, and the exploitation requires only network access to the preview link.