CVE-2026-113731: djust Arbitrary Absolute-Path File Read Vulnerability
Summary
CVE-2026-113731: djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool. Affects djust across 4 version ranges.
>= 0.9.0, < 1.0.10
>= 1.1.0, < 1.1.7
>= 1.2.0.dev0, < 1.2.4
>= 1.3.0.dev0, < 1.3.0rc8
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
djust is an open-source Python package designed to facilitate template handling within Django applications. It provides tools for managing templates and their associated functionalities, enhancing the development experience. However, a vulnerability exists in the MCP tool, specifically in the find_handlers_for_template function, which allows for arbitrary file reads when provided with absolute paths, posing a significant security risk.
Vulnerability Detail
The vulnerability arises from the lack of proper validation when the find_handlers_for_template function is called with an absolute file path. If an attacker can access this function, they can read any file on the server that the process has permission to access, including sensitive files like /etc/passwd or application configuration files. This issue is exacerbated by the absence of checks to restrict file access to designated project directories, leading to potential data exposure.
How To Fix
Latest published version: 1.2.6 as of 22 Oct 2026
pip install --upgrade "djust==1.2.6"Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
>= 0.9.0, < 1.0.101.0.10pip install --upgrade "djust==1.0.10" -
>= 1.1.0, < 1.1.71.1.7pip install --upgrade "djust==1.1.7" -
>= 1.2.0.dev0, < 1.2.41.2.4pip install --upgrade "djust==1.2.4" -
>= 1.3.0.dev0, < 1.3.0rc81.3.0rc8pip install --upgrade "djust==1.3.0rc8"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary measure, run the MCP server only in projects where you trust the agent with file access. Additionally, ensure that only logical template names are passed to the find_handlers_for_template function to avoid triggering the vulnerability.
Conclusion
The djust package contains a vulnerability that allows arbitrary file reads through the find_handlers_for_template function. It is crucial to update to the latest patched versions to mitigate this risk. Users should also consider implementing workarounds until they can apply the necessary updates.
See every vulnerability recorded for djust →
FAQ
The vulnerability allows arbitrary file reads when an absolute path is provided to the find_handlers_for_template function, potentially exposing sensitive information.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability can lead to unauthorized access to sensitive files on the server, which could compromise application security and user data.
If an immediate update is not possible, ensure that the MCP server is only run in trusted environments and restrict the use of absolute paths in function calls.
The CVSS score for this vulnerability is 3.3, indicating a low severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for djust.
