CVE-2026-113731 djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-113731?
CVE-2026-113731 is a low-severity vulnerability in djust-org djust, published on 20 Oct 2026.
Official description
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handlers_for_template MCP tool in python/djust/mcp/server.py accepts an existing absolute template_path and reads it without restricting the resolved path to the project or configured template directories. A local MCP client can use the tool as a file existence and readability oracle and can obtain substrings that match the tool's dj-click, dj-submit, dj-change, dj-input, dj-keydown, or dj-keyup attribute pattern from files readable by the djust process. The maintainer assessment states that the MCP server communicates over local stdio as the same operating-system user and has no network listener, and the tool does not return arbitrary raw file contents. This issue is fixed in versions 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8.
Weakness: CWE-22
Which versions are affected by CVE-2026-113731?
8 open source packages ship an affected version, including djust.
| Package | Affected | Fixed in |
|---|---|---|
djust PyPI | From 0.9.0 | 1.0.10 |
djust PyPI | From 0.9.0 | 1.0.10 |
djust PyPI | From 1.1.0 | 1.1.7 |
djust PyPI | From 1.1.0 | 1.1.7 |
djust PyPI | From 1.2.0.dev0 | 1.2.4 |
djust PyPI | From 1.2.0.dev0 | 1.2.4 |
2 more packages
djust PyPI | From 1.3.0.dev0 | 1.3.0rc8 |
djust PyPI | From 1.3.0.dev0 | 1.3.0rc8 |
How do I fix CVE-2026-113731?
Upgrade djust to a fixed version for your release line: 1.0.10, 1.1.7, 1.2.4 or 1.3.0rc8.
Is CVE-2026-113731 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-113731 exists.
Sources
Also known as GHSA-r57g-mc79-8hj2.