CVE-2026-61588— djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client
Quick assessment
Affected
djust-org djust
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
为 Django 提供了类似于 Phoenix LiveView 的响应式服务器端渲染功能，并结合 Rust 引擎实现高性能。在 1.0.7 版本之前，当将 Django 的 实例赋值给公开的视图属性时， 会将其序列化并发送到客户端，但未设置敏感字段排除列表（denylist），导致如 （即密码哈希值）、权限标志位（例如 / ）、令牌（tokens）以及其他个人身份信息（PII）等字段会被直接发送到浏览器端。由于将模型对象暴露给模板是 中常见的开发模式，开发者可能未意识到整个模型对象被传输到了前端，从而造成凭据或
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-61588
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client
Source: CVE Program / CVE List V5
Vulnerability Description
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-61588
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-61588
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-61588 (1)
Vendor Pages for CVE-2026-61588 (1)
-
🔗 Release v1.0.7 · djust-org/djust · GitHub x_refsource_MISC
Same Patch Batch · djust-org · 2026-09-16 · 12 CVEs total
| CVE-2026-61594 | 9.1 CRITICAL | djust has an authorization bypass on the WebSocket/SSE mount path |
| CVE-2026-61599 | 8.8 HIGH | djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path |
| CVE-2026-61593 | 8.1 HIGH | djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin p |
| CVE-2026-61591 | 8.1 HIGH | djust: Unsigned client state snapshot is restored as trusted view state (privilege escalat |
| CVE-2026-61595 | 7.7 HIGH | djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenan |
| CVE-2026-61590 | 7.4 HIGH | djust's observability endpoints are network-exposed: the localhost gate is an opt-in middl |
| CVE-2026-61592 | 7.4 HIGH | djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id |
| CVE-2026-61598 | 7.1 HIGH | Client mass-assignment of arbitrary view attributes via the default dj-model update_model |
| CVE-2026-61596 | 7.1 HIGH | djust has broken object-level access control (IDOR) |
| CVE-2026-61589 | 6.3 MEDIUM | djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdoma |
| CVE-2026-61597 | 5.1 MEDIUM | djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component tem |
IV. Related Vulnerabilities
Same product: djust
-
CVE-2026-61599
djust has an unauthenticated arbitrary module import via the -
CVE-2026-61589
djust: WebSocket/runtime reconstructed request omits the cli -
CVE-2026-61596
djust has broken object-level access control (IDOR) -
CVE-2026-61594
djust has an authorization bypass on the WebSocket/SSE mount -
CVE-2026-61591
djust: Unsigned client state snapshot is restored as trusted
Same vendor: djust-org
-
CVE-2026-61599
djust has an unauthenticated arbitrary module import via the -
CVE-2026-61589
djust: WebSocket/runtime reconstructed request omits the cli -
CVE-2026-61596
djust has broken object-level access control (IDOR) -
CVE-2026-61594
djust has an authorization bypass on the WebSocket/SSE mount -
CVE-2026-61591
djust: Unsigned client state snapshot is restored as trusted
Same weakness: CWE-200
-
CVE-2026-92594
Craft CMS before 5.11.0 Unauthenticated PII Disclosure via G -
CVE-2026-64684
RMCP: Custom HTTP headers leak to cross-origin redirect targ -
CVE-2026-92811
browserless 1.44.0 through 2.56.7 File Protocol Restriction -
CVE-2026-92770
Harbor through 2.15.2 Scanner Credential Disclosure via Quer -
CVE-2026-20360
Cisco Nexus Dashboard Software Security Hardening Release Se
V. Comments for CVE-2026-61588
No comments yet