Skip to content
OpenAdvisories

Package · Go

github.com/dagu-org/dagu/v2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2026-102943

    Dagu MCP DAG specification read bypasses path containment and workspace isolation

    Dagu is a workflow engine with a built-in Web user interface. Prior to version 2.11.0, its MCP  dagu_read  operation with target  dag_spec  invokes the DAG specification API directly, bypassing the HTTP middleware introduced for CVE-2026-33344. The underlying…

    dagucloud dagu github.com/dagu-org/dagu/v2 Go