DJUST · CVE-2026-61599 · Package
FIX → 1.0.7
djust resolves a client-supplied dotted view path with __import__ before checking authentication or that the object is a LiveView, so the module's top-level code runs. An unauthenticated client can therefore execute import-time code of any importable Python module, and can also use error messages to enumerate modules.
first public Jun 22, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Any Django application that runs djust with its live WebSocket or SSE transport exposed to clients is exposed, because the mount path does not require authentication before importing the requested module. Applications that do not use djust, or that keep the live transport unreachable from untrusted networks, can skip it; the sources do not say whether the flaw needs any specific view configuration beyond the default unset allowlist.
Not affected if djust-not-installed, live-transport-not-exposed, version-1.0.7-or-later
Who cares cwe-470, django, djust, python, sse, websocket
pip show djust and compare it to the fixed range.LIVEVIEW_ALLOWED_MODULES; if it is unset, the allowlist is fail-open.Upgrade to 1.0.7
The djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling __import__(module_path, ...). The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a LiveView subclass and before any per-view authentication. The LIVEVIEW_ALLOWED_MODULES allowlist that should contain this is fail-open (if allowed_modules: — skipped when the setting is unset, the framework default) and uses loose startswith matching.
An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a mount / live_redirect_mount / url_change frame (or an SSE mount) with view = "<any.importable.module>.AnyName" and cause the server to import — and execute the top-level code of — any importable Python module by name.
server-side execution of arbitrary importable modules' import-time side effects by an unauthenticated client (effectively RCE-by-proxy on any host that has a side-effectful importable module), denial of service (import bombs / expensive dependency trees), and a module/class via distinct error strings.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
1.0.71.0.7LIVEVIEW_ALLOWED_MODULES to the narrow list of modules that contain your mountable LiveView classes; the sources say this is mitigation, not a complete fix.Reproduced end-to-end: an unauthenticated WebsocketCommunicator mount frame with the allowlist unset imported and executed a sentinel non-LiveView module before the "not a LiveView subclass" rejection.
python/djust/websocket.py handle_mount (__import__ of the client view)python/djust/runtime.py ViewRuntime.dispatch_mount / _instantiate_view (SSE + url_change path)python/djust/sse.py SSE mountThreat-model entry T4 (docs/audits/websocket-auth-2026-06.md) previously noted the default-open allowlist but understated the impact as mere LiveView-class probing; the real primitive is arbitrary-module import + top-level code execution, independent of whether the target is a LiveView.
Fixed by a fail-closed resolution gate (djust._view_resolution.is_view_import_allowed): a client view path resolves only if (a) its module is already loaded (sys.modules — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches LIVEVIEW_ALLOWED_MODULES on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before __import__ at all three sinks (+ defense-in-depth inside _instantiate_view).
Set LIVEVIEW_ALLOWED_MODULES to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is startswith-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)
Reproducer + finding writeup retained privately by the maintainer.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.