CVE-2026-102943

Dagu is a workflow engine with a built-in Web user interface. Prior to version 2.11.0, its MCP  dagu_read  operation with target  dag_spec  invokes the DAG specification API directly, bypassing the HTTP middleware introduced for CVE-2026-33344. The underlying resolver does not restrict resolved paths to configured DAG directories. An authenticated attacker with a viewer-role API key can supply an absolute or traversing path to read  .yaml  or  .yml  files outside those directories that are accessible to the Dagu process. The affected operation does not provide write or execution capability. This issue is fixed in version 2.11.0.

• CWE-22
• CWE-863

• https://github.com/dagucloud/dagu/commit/c15c5406bb7b9551f94ab276705f9fd1cebbf2d2
• https://github.com/dagucloud/dagu/pull/2424
• https://github.com/dagucloud/dagu/releases/tag/v2.11.0
• https://github.com/dagucloud/dagu/security/advisories/GHSA-5m6c-38r8-5w76

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102930virtualenv is a tool for creating isolated virtual python en…7.7
• CVE-2026-102937virtualenv is a tool for creating isolated virtual python en…7.3
• CVE-2026-102938virtualenv is a tool for creating isolated virtual python en…5.8
• CVE-2026-10294A vulnerability has been found in PackageKit up to 1.3.5. Af…4.3
• CVE-2026-102940OpenEMR is a free and open source electronic health records …9.6
• CVE-2026-102941The package github.com/gomarkdown/markdown is a Go library f…7.5
• CVE-2026-102944cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior t…7.5
• CVE-2026-102946joserfc is a Python library that provides an implementation …9.1
• CVE-2026-10295A vulnerability was found in SourceCodester Customer Review …3.3
• CVE-2026-10296A vulnerability was determined in itsourcecode Fees Manageme…6.3
• CVE-2026-10297A vulnerability was identified in itsourcecode Fees Manageme…6.3
• CVE-2026-10298A security flaw has been discovered in ggml-org whisper.cpp …3.3