Low 3.3Published Oct 20, 2026

CVE-2026-113731djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool

Updated under an hour ago (2026-10-22 03:50 UTC)

Does this affect you?

It affects djust-org djust. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for djust-org djust

Exploited in the last 30 days

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handlers_for_template MCP tool in python/djust/mcp/server.py accepts an existing absolute template_path and reads it without restricting the resolved path to the project or configured template directories. A local MCP client can use the tool as a file existence and readability oracle and can obtain substrings that match the tool's dj-click, dj-submit, dj-change, dj-input, dj-keydown, or dj-keyup attribute pattern from files readable by the djust process. The maintainer assessment states that the MCP server communicates over local stdio as the same operating-system user and has no network listener, and the tool does not return arbitrary raw file contents. This issue is fixed in versions 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8.

CVSS: 3.3 LOW (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness (CWE): CWE-22
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: GitHub_M
NVD analysis: Deferred
Record last updated: Oct 20, 2026
First seen by InfoSec Signals: Oct 20, 2026

Affected products

Affected products

djust-org djust djust_org:djust (from the name)	from 0.9.0, < 1.0.10; from 1.1.0, < 1.1.7; from 1.2.0.dev0, < 1.2.4; from 1.3.0.dev0, < 1.3.0rc8	CNA record

References

https://github.com/djust-org/djust/security/advisories/GHSA-r57g-mc79-8hj2x-refsource-confirm
https://github.com/djust-org/djust/commit/45a5045793ebe7c9c2df86b0ad34275af6822619x-refsource-misc
https://github.com/djust-org/djust/commit/744bccf699c65c815d9379b36236a7c5592a339bx-refsource-misc
https://github.com/djust-org/djust/commit/85eed7caaf620bdb08986f2f3bb79432c0d3d715x-refsource-misc
https://github.com/djust-org/djust/commit/a62caf6b4ef540ad688d4dfdfa407ff914c78728x-refsource-misc
https://github.com/djust-org/djust/releases/tag/v1.0.10x-refsource-misc
https://github.com/djust-org/djust/releases/tag/v1.1.7x-refsource-misc
https://github.com/djust-org/djust/releases/tag/v1.2.4x-refsource-misc
https://github.com/djust-org/djust/releases/tag/v1.3.0rc8x-refsource-misc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.