A vulnerability was found in dagu-org dagu. It has been declared as critical. This issue affects some unknown processing. Such manipulation of the argument dagRunId leads to path traversal.

This vulnerability is traded as CVE-2026-31886. The attack may be launched remotely. There is no exploit available.