{"data":{"id":"210d9006-3827-4cb2-bfb7-b0d67aaf1bc5","title":"GHSA-5m6c-38r8-5w76: Dagu MCP DAG specification read bypasses path containment and workspace isolation","summary":"The fix for CVE-2026-33344 is installed only in the chi HTTP handler chain, so the MCP service's in-process call to GetDAGSpec bypasses it. The dagu_read tool with target dag_spec can therefore read arbitrary .yaml/.yml files by absolute path, including with a viewer-role key, and it also crosses workspace isolation because GetDAGSpec skips the requireWorkspaceVisible check. The defect was confirmed at HEAD f6c039f, after v2.10.7.","solution":"The source suggests moving the containment check out of HTTP middleware and into locateDAG, rejecting any resolved path that does not fall under baseDir or a configured search path. It also suggests adding requireWorkspaceVisible to GetDAGSpec to match its sibling handlers.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-5m6c-38r8-5w76","publishedAt":"2026-11-10T15:56:49.000Z","cveId":"CVE-2026-102943","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/dagu-org/dagu/v2@<= 2.10.7 (fixed: 2.11.0)"],"affectedPackageNames":["github.com/dagu-org/dagu/v2"],"affectedPackageRefs":["go:github.com/dagu-org/dagu/v2"],"affectedVendors":[],"affectedVendorsRaw":["Dagu MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00413,"epssCheckedAt":"2026-11-10T18:05:32.643Z","kevDateAdded":null,"advisoryAliases":["GHSA-5m6c-38r8-5w76"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-11-10T15:56:49.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-11-10T18:06:02.880Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"go","name":"github.com/dagu-org/dagu/v2","fixedVersion":"2.11.0","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":"ecosystem","source":null,"status":"package_not_found","checkedAt":"2026-11-10T18:06:02.876Z"}]}}