{"id":"CVE-2026-113731","title":"djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool","summary":"djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handlers_for_template MCP tool in python/djust/mcp/server.py acc…","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvssSource":"cna","cwe":["CWE-22"],"vendor":"djust-org","product":"djust","affected":["djust >= 0.9.0, < 1.0.10","djust >= 1.1.0, < 1.1.7","djust >= 1.2.0.dev0, < 1.2.4","djust >= 1.3.0.dev0, < 1.3.0rc8"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T21:31:28.008Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113731","references":[{"url":"https://github.com/djust-org/djust/security/advisories/GHSA-r57g-mc79-8hj2","label":"https://github.com/djust-org/djust/security/advisories/GHSA-r57g-mc79-8hj2"},{"url":"https://github.com/djust-org/djust/commit/45a5045793ebe7c9c2df86b0ad34275af6822619","label":"https://github.com/djust-org/djust/commit/45a5045793ebe7c9c2df86b0ad34275af6822619"},{"url":"https://github.com/djust-org/djust/commit/744bccf699c65c815d9379b36236a7c5592a339b","label":"https://github.com/djust-org/djust/commit/744bccf699c65c815d9379b36236a7c5592a339b"},{"url":"https://github.com/djust-org/djust/commit/85eed7caaf620bdb08986f2f3bb79432c0d3d715","label":"https://github.com/djust-org/djust/commit/85eed7caaf620bdb08986f2f3bb79432c0d3d715"},{"url":"https://github.com/djust-org/djust/commit/a62caf6b4ef540ad688d4dfdfa407ff914c78728","label":"https://github.com/djust-org/djust/commit/a62caf6b4ef540ad688d4dfdfa407ff914c78728"},{"url":"https://github.com/djust-org/djust/releases/tag/v1.0.10","label":"https://github.com/djust-org/djust/releases/tag/v1.0.10"},{"url":"https://github.com/djust-org/djust/releases/tag/v1.1.7","label":"https://github.com/djust-org/djust/releases/tag/v1.1.7"},{"url":"https://github.com/djust-org/djust/releases/tag/v1.2.4","label":"https://github.com/djust-org/djust/releases/tag/v1.2.4"},{"url":"https://github.com/djust-org/djust/releases/tag/v1.3.0rc8","label":"https://github.com/djust-org/djust/releases/tag/v1.3.0rc8"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T22:23:33.697Z","slug":"CVE-2026-113731","body":"## Overview\n\ndjust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handlers_for_template MCP tool in python/djust/mcp/server.py accepts an existing absolute template_path and reads it without restricting the resolved path to the project or configured template directories. A local MCP client can use the tool as a file existence and readability oracle and can obtain substrings that match the tool's dj-click, dj-submit, dj-change, dj-input, dj-keydown, or dj-keyup attribute pattern from files readable by the djust process. The maintainer assessment states that the MCP server communicates over local stdio as the same operating-system user and has no network listener, and the tool does not return arbitrary raw file contents. This issue is fixed in versions 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8.\n\n## Affected\n\n- `djust >= 0.9.0, < 1.0.10`\n- `djust >= 1.1.0, < 1.1.7`\n- `djust >= 1.2.0.dev0, < 1.2.4`\n- `djust >= 1.3.0.dev0, < 1.3.0rc8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}