Dagu affected by unauthenticated RCE via inline DAG spec in default configuration in github.com/dagu-org/dagu

Description

References

• dagu-org/dagu security advisory · ADVISORY

More vulnerabilities in github.com/dagu-org/dagu

• CVE-2026-33344HIGH 8.1Dagu is a workflow engine with a built-in Web user interface. From version 2.0.0 to before version 2.3.1, the fix for CVE-2026-27598 added V…
• CVE-2026-31886HIGH 7.6Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the inline DAG executio…
• CVE-2026-27598MEDIUM 6.5Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the `CreateNewDAG` API endpoint (`POST…
• GHSA-6qr9-g2xw-cw92CRITICAL 9.8Dagu affected by unauthenticated RCE via inline DAG spec in default configuration