—
GO-2026-5600
Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles in github.com/daytonaio/daytona
Quick fix
GO-2026-5600 — github.com/daytonaio/daytona: upgrade to the fixed version with the command below.
go get github.com/daytonaio/daytona@v0.185.0Details
Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles in github.com/daytonaio/daytona
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/daytonaio/daytona
Introduced in:
0Fixed in: 0.185.0Fix
go get github.com/daytonaio/daytona@v0.185.0