CVE-2026-113731 Details
Description
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handlers_for_template MCP tool in python/djust/mcp/server.py accepts an existing absolute template_path and reads it without restricting the resolved path to the project or configured template directories. A local MCP client can use the tool as a file existence and readability oracle and can obtain substrings that match the tool's dj-click, dj-submit, dj-change, dj-input, dj-keydown, or dj-keyup attribute pattern from files readable by the djust process. The maintainer assessment states that the MCP server communicates over local stdio as the same operating-system user and has no network listener, and the tool does not return arbitrary raw file contents. This issue is fixed in versions 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8.
A vulnerability exists in the Djust library, specifically in versions 0.9.0 prior to 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8. The issue arises within the MCP tool 'find_handlers_for_template', which fails to properly confine absolute file paths to the project's template directories or the BASE_DIR. This lack of restriction allows a local MCP client to read any file the process has permission to, using the tool as an oracle for file existence and readability. The vulnerability is particularly concerning because it can be exploited to access sensitive files, such as application environment files or SSH keys, depending on the server process's user permissions.
Users can upgrade to Djust versions 1.0.10, 1.1.7, 1.2.4, or 1.3.0rc8, where this vulnerability has been fixed. Instructions for downloading these versions are available on the Djust GitHub releases page.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 20, 2026CISA-ADP
Assessed Oct 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| djust | >= 0.9.0, <= 1.0.9 (semver) >= 1.1.0, <= 1.1.6 (semver) >= 1.2.0.dev0, <= 1.2.3 >= 1.3.0.dev0, <= 1.3.0rc7 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 28, 2026 | CVE Modified | CISA-ADP |
| Oct 20, 2026 | New CVE Received | [email protected] |