GHSA-6qr9-g2xw-cw92: Verified Repro With Script Download

Q: Why is GHSA-6qr9-g2xw-cw92 exploitable out of the box?

The exploitability comes from Dagu's default configuration, not a code path requiring malicious input to reach — administrators who don't explicitly enable authentication are exposed as soon as the API is reachable over the network.

Q: Which Dagu versions are affected by GHSA-6qr9-g2xw-cw92?

Versions <= 1.30.3 are documented as affected in this reproduction.

Q: How severe is GHSA-6qr9-g2xw-cw92?

It is rated critical severity: an unauthenticated network client can execute arbitrary shell commands on the Dagu host with no credentials required.

Q: How can I reproduce GHSA-6qr9-g2xw-cw92?

Download the verified script from this page and run it in an isolated environment against Dagu <= 1.30.3 with its default (no-auth) configuration. Send an unauthenticated POST /api/v2/dag-runs request containing an inline YAML DAG spec whose step runs a shell command, and confirm the command executes without any credentials.

Pruva

GHSA-6qr9-g2xw-cw92: Verified Repro With Script Download

GHSA-6qr9-g2xw-cw92: Dagu Unauthenticated RCE via Inline DAG Spec

Download script Open in Codespaces

GHSA-6qr9-g2xw-cw92 is verified against github.com/dagu-org/dagu · go. Affected versions: <= 1.30.3. Vulnerability class: RCE. This critical reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00106.

REPRO-2026-00106 github.com/dagu-org/dagu · go RCE Feb 20, 2026 .txt

Severity

CRITICAL

Reproduced in

18m 38s

Tool calls

153

Spend

$0.77

01 · Overview

What Is GHSA-6qr9-g2xw-cw92?

GHSA-6qr9-g2xw-cw92 is a critical missing-authentication vulnerability (CWE-306) in Dagu, whose default configuration ships with authentication completely disabled, allowing unauthenticated remote code execution via an inline DAG spec. Pruva reproduced it (reproduction REPRO-2026-00106).

02 · Severity & CVSS

GHSA-6qr9-g2xw-cw92 Severity

GHSA-6qr9-g2xw-cw92 is rated critical severity.

CRITICAL threat level

Weakness CWE-306 (Missing Authentication for Critical Function) — Missing Authentication for Critical Function

Critical — the most severe class — typically remotely exploitable with severe impact. Treat as an emergency.

03 · Affected Versions

Affected github.com/dagu-org/dagu Versions

github.com/dagu-org/dagu · go versions <= 1.30.3 are affected.

05 · How to Reproduce

Download script Open in Codespaces →

$ pruva-verify REPRO-2026-00106

or

curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00106/artifacts/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh

Run in a VM or disposable container. This exploits a real vulnerability.

06 · Proof of Reproduction

Proof of Reproduction for GHSA-6qr9-g2xw-cw92

Reproduced by Pruva's autonomous agents — 153 tool calls over 19 min. Full root-cause analysis and the complete transcript are below.

How the agent worked 495 events · 153 tool calls · 19 min

19 minDuration

153Tool calls

112Reasoning steps

495Events

2Dead-ends

Agent activity over 19 min

Support

30

Repro

224

Variant

237

0:0018:38

Root Cause and Exploit Chain for GHSA-6qr9-g2xw-cw92

Dagu's default configuration ships with authentication completely disabled. The POST /api/v2/dag-runs endpoint accepts an inline YAML spec and executes shell commands immediately without authentication.

GHSA-6qr9-g2xw-cw92 Reproduction Transcript

The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired.

Full session Replay every step — scrub the timeline or play it back.

Event 1/40

0:00

support

repro

1:49

0:00

session startedaccounts/fireworks/models/kimi-k2p5 · ghsa-6qr9-g2xw-cw92 · ghsa-6qr

0:09

0:10

✗ error

Unknown error

0:17

0:29

0:39

0:42

web search

0:46