CVE-2026-61591

djust, a Python web framework distributed via pip, restored a client-embedded state snapshot (state_json) as trusted view state on reconnect without any integrity check in versions prior to 1.0.7 for views that opted into state snapshots. Because the snapshot was unsigned, a client of the application could edit the JSON in their page and return it in the reconnect mount frame to inject arbitrary view attributes. This allowed an attacker to escalate privilege or tamper with business state, for example by flipping is_admin to True or changing account_id or balance values held in public view attributes, which is the normal djust pattern. Applications are affected only if they run a pre-1.0.7 djust version with the opt-in state snapshot feature enabled and keep authorization or ownership data in public view attributes. No public proof-of-concept or in-the-wild exploitation is known.

What to do: Upgrade to djust 1.0.7, which signs state snapshots and rejects unsigned or forged snapshots on the back-navigation restore path. If upgrading is not immediately possible, disable state snapshots and move authorization/ownership data such as is_admin, account_id, or balance out of public view attributes. Audit any views that used snapshots for signs of tampered attribute values.