Skip to content
OpenAdvisories

Vendor

dagucloud

1 known vulnerabilities.

Products

dagu 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-102943

    Dagu MCP DAG specification read bypasses path containment and workspace isolation

    Dagu is a workflow engine with a built-in Web user interface. Prior to version 2.11.0, its MCP  dagu_read  operation with target  dag_spec  invokes the DAG specification API directly, bypassing the HTTP middleware introduced for CVE-2026-33344. The underlying…

    dagucloud dagu github.com/dagu-org/dagu/v2 Go