Daytona versions before 0.186 improperly handle sandbox volume references (volumeId or volume name) when constructing host bind-mount source paths. Without confinement, a crafted volume reference containing path-traversal sequences could cause the mount source path to resolve outside the intended per-volume base directory. This constitutes a CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) vulnerability. The issue is resolved in version 0.186.

An attacker with the ability to specify a sandbox volume reference could exploit this vulnerability to cause the system to bind-mount directories outside the intended restricted directory. This may lead to unauthorized access or modification of files outside the sandbox environment, impacting confidentiality and integrity with limited privileges required. The CVSS vector indicates a network attack vector with high attack complexity and low privileges required, resulting in limited confidentiality and integrity impact but no availability impact.

This vulnerability is fixed in daytona version 0.186. Users should upgrade to version 0.186 or later to remediate this issue. No other official remediation or temporary fixes are indicated. Patch status is confirmed by the vendor advisory stating the fix is in 0.186.