GO-2026-4527
NoneCVSS
—
EPSS
—
Published
Feb 23, 2026
CISA due date
—
The record
Dagu affected by unauthenticated RCE via inline DAG spec in default configuration in github.com/dagu-org/dagu
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/dagu-org/dagu | 0 | No fix |