Summary
Forged admin forms can create unauthorized model instances. This low-severity finding affects Django.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Forged admin forms can create unauthorized model instances
CVE-2026-4292
- Affected product
- Django
- Severity
- Low · CVSS 2.7
- Weakness
- CWE-862
- Disclosed