{"apiVersion":"1.0","identifier":"CVE-2026-55571","description":"djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handle_mount sends a `{-type-:-navigate-,-to-:...}` frame when login_required, permission_required, or a redirecting on_mount hook denies a LiveView mount, but returns without closing the WebSocket or clearing self.view_instance. A browser follows the redirect, but a raw WebSocket client can ignore it and retain the mounted socket. Because LiveViewConsumer.handle_event does not recheck authentication or authorization, the client can send `{-type-:-event-,...}` frames that invoke @event_handler methods without an authenticated session, including through handle_live_redirect_mount, enabling unauthorized sensitive reads or mutations. This issue is fixed in version 1.0.4.","publishedAt":"2026-08-25T17:17:32","lastModifiedAt":"2026-08-25T18:17:55","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-55571","cvssScore":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","epssProbability":0.00283,"riskScore":0.84,"affectedProduct":"djust","affectedVersions":"<1.0.4","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-55571","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-55571","en":"https://www.redsauce.net/en/cves/CVE-2026-55571","fr":"https://www.redsauce.net/fr/cves/CVE-2026-55571","pt":"https://www.redsauce.net/pt/cves/CVE-2026-55571","de":"https://www.redsauce.net/de/cves/CVE-2026-55571","sk":"https://www.redsauce.net/sk/cves/CVE-2026-55571","el":"https://www.redsauce.net/el/cves/CVE-2026-55571"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-55571"}}