dagu-org vulnerabilities

Products

• github.com/dagu-org/dagu/v2 6

Latest dagu-org CVEs

Newest publication first

1. CVE-2026-102943 Dagu MCP DAG specification read bypasses path containment and workspace isolation

   Published 2026-11-05

   Medium·CVSS 6.5 EPSS 0.41%

   Dagu is a workflow engine with a built-in Web user interface. Prior to version 2.11.0, its MCP dagu_read operation with target dag_spec invokes the DAG specification API directly, bypassing the HTTP middleware introduced for CVE-2026-33344. The underlying resolver does not restri...

2. CVE-2026-33344 Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG

   Published 2026-03-24

   High·CVSS 8.1 EPSS 0.50%

   Dagu is a workflow engine with a built-in Web user interface. From version 2.0.0 to before version 2.3.1, the fix for CVE-2026-27598 added ValidateDAGName to CreateNewDAG and rewrote generateFilePath to use filepath.Base. This patched the CREATE path. The remaining API endpoints...

3. CVE-2026-31886 Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution

   Published 2026-03-13

   High·CVSS 7.6 EPSS 0.46%

   Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the inline DAG execution endpoints is passed directly into filepath.Join to construct a temporary directory path without any format validation. Go's filepath.Join...

4. CVE-2026-31882 Dagu SSE Authentication Bypass in Basic Auth Mode

   Published 2026-03-13

   High·CVSS 7.5 EPSS 0.88%

   Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, when Dagu is configured with HTTP Basic authentication (DAGU_AUTH_MODE=basic), all Server-Sent Events (SSE) endpoints are accessible without any credentials. This allows unauthenticated attackers to acc...

5. CVE-2026-27598 Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory

   Published 2026-02-25

   High·CVSS 7.1 EPSS 0.65%

   Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the CreateNewDAG API endpoint (POST /api/v1/dags) does not validate the DAG name before passing it to the file store. An authenticated user with DAG write permissions can write a...

6. GHSA-6qr9-g2xw-cw92 Dagu affected by unauthenticated RCE via inline DAG spec in default configuration

   Published 2026-02-19

   Critical·CVSS 9.8

   Summary Dagu's default configuration ships with authentication disabled. The POST /api/v2/dag-runs endpoint accepts an inline YAML spec and executes its shell commands immediately with no credentials required — any dagu instance reachable over the network is fully compromised by...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.