Skip to content
Verified reproduction

GHSA-6qr9-g2xw-cw92: Dagu Unauthenticated RCE via Inline DAG Spec

Download script Open in Codespaces

GHSA-6qr9-g2xw-cw92 is verified against github.com/dagu-org/dagu · go affected versions: <= 1.30.3 vulnerability class: RCE This critical reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00106.

REPRO-2026-00106 github.com/dagu-org/dagu · go RCE Feb 20, 2026 .txt
Severity CRITICAL
Confidence HIGH
Reproduced in 18m 38s
Tool calls 153
Spend $0.77
Affected <= 1.30.3
01 · Reproduce
Download script Open in Codespaces →
$ pruva-verify REPRO-2026-00106
or curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00106/artifacts/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh
Run in a VM or disposable container. This exploits a real vulnerability.
02 · The vulnerability

Dagu's default configuration ships with authentication completely disabled. The POST /api/v2/dag-runs endpoint accepts an inline YAML spec and executes shell commands immediately without authentication.

03 · Root cause 
Dagu's default configuration ships with authentication completely disabled. The POST /api/v2/dag-runs endpoint accepts an inline YAML spec and executes shell commands immediately without authentication.
04 · Reproduction transcript

The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired. Phases: support triages the advisory · repro reproduces it · vuln_variant confirms the fix blocks it · judge verifies.

Loading session...
05 · Artifacts

Scripts, logs, diffs, and output captured during the reproduction.

No artifacts available