Disclosure summary
CVE-2026-4292 is a low-severity CWE-862 vulnerability in Django. Forged admin forms can create unauthorized model instances. Cantina reproduced the behavior, verified its security impact, and coordinated disclosure with the affected maintainer.
Verification standard
Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.