Dagu-org Dagu vulnerabilities
- dagu-org daguDagu MCP DAG specification read bypasses path containment and workspace isolation6.5 Medium
- daguDagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG8.1 High
- daguDagu has a Path Traversal via `dagRunId` in Inline DAG Execution9.1 Critical
- daguDagu SSE Authentication Bypass in Basic Auth Mode7.5 High
- daguDagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory7.1 High