CVE-2026-61591— djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)
Quick assessment
Affected
djust-org djust
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
djust 为 Django 提供类似 Phoenix LiveView 的响应式服务器端渲染，并借助 Rust 引擎实现高性能处理。在 1.0.7 版本之前，对于启用了状态快照（state snapshots）的视图，嵌入在客户端页面中的快照 在重连时会被直接作为受信任的视图状态恢复，且未进行完整性校验。攻击者（客户端）可以修改其页面中未签名的 ，并在重连挂载帧（mount frame）中将其返回，从而注入任意的视图属性——例如将 翻转为 ，或修改 或 ——以此实现权限提升，或篡改存储在公开视图属性中的业务状态（
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1598.004 · Spearphishing Voice
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-61591
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)
Source: CVE Program / CVE List V5
Vulnerability Description
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, for views that opt into state snapshots, the snapshot `state_json` embedded in the client page was restored on reconnect as trusted view state with no integrity check. A client could edit the unsigned `state_json` in their page and return it in the reconnect mount frame to inject arbitrary view attributes — e.g. flip `is_admin` to `True`, or change `account_id` / `balance` — escalating privilege or tampering with business state held in public view attributes (the normal djust pattern). This issue is fixed in djust 1.0.7. State snapshots are signed; unsigned or forged snapshots are rejected on the back-navigation restore path. As a workaround, do not enable state snapshots; do not hold authorization/ownership state in public view attributes.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对数据真实性的验证不充分
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-61591
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-61591
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-61591 (1)
Vendor Pages for CVE-2026-61591 (1)
-
🔗 Release v1.0.7 · djust-org/djust · GitHub x_refsource_MISC
Same Patch Batch · djust-org · 2026-09-16 · 12 CVEs total
| CVE-2026-61594 | 9.1 CRITICAL | djust has an authorization bypass on the WebSocket/SSE mount path |
| CVE-2026-61599 | 8.8 HIGH | djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path |
| CVE-2026-61593 | 8.1 HIGH | djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin p |
| CVE-2026-61595 | 7.7 HIGH | djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenan |
| CVE-2026-61590 | 7.4 HIGH | djust's observability endpoints are network-exposed: the localhost gate is an opt-in middl |
| CVE-2026-61592 | 7.4 HIGH | djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id |
| CVE-2026-61598 | 7.1 HIGH | Client mass-assignment of arbitrary view attributes via the default dj-model update_model |
| CVE-2026-61596 | 7.1 HIGH | djust has broken object-level access control (IDOR) |
| CVE-2026-61588 | 6.5 MEDIUM | djust's Django model serialization has no sensitive-field denylist: password hashes, privi |
| CVE-2026-61589 | 6.3 MEDIUM | djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdoma |
| CVE-2026-61597 | 5.1 MEDIUM | djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component tem |
IV. Related Vulnerabilities
Same product: djust
-
CVE-2026-61599
djust has an unauthenticated arbitrary module import via the -
CVE-2026-61589
djust: WebSocket/runtime reconstructed request omits the cli -
CVE-2026-61596
djust has broken object-level access control (IDOR) -
CVE-2026-61588
djust's Django model serialization has no sensitive-field de -
CVE-2026-61594
djust has an authorization bypass on the WebSocket/SSE mount
Same vendor: djust-org
-
CVE-2026-61599
djust has an unauthenticated arbitrary module import via the -
CVE-2026-61589
djust: WebSocket/runtime reconstructed request omits the cli -
CVE-2026-61596
djust has broken object-level access control (IDOR) -
CVE-2026-61588
djust's Django model serialization has no sensitive-field de -
CVE-2026-61594
djust has an authorization bypass on the WebSocket/SSE mount
Same weakness: CWE-345
V. Comments for CVE-2026-61591
No comments yet