Log in Start free

Vulnerability · Published Oct 5, 2026 · Assigned by VulDB

CVE-2026-105315django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection

Medium 4.7

In plain English

A medium-severity code injection in django-haystack. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.7Medium
Exploit odds (30 days)0.3%top 82.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/backends/elasticsearch_backend.py of the component more_like_this Template Tag Handler. Such manipulation of the argument result_class leads to improper neutralization of directives in dynamically evaluated code. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.0 is able to address this issue. The name of the patch is eb05f193c9771a68dcc8cfac6674a0d48a52ee9d. It is suggested to upgrade the affected component.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12django-haystackno fix listedDEBIAN-CVE-2026-105315
Debian:13django-haystackno fix listedDEBIAN-CVE-2026-105315
Debian:14django-haystackno fix listedDEBIAN-CVE-2026-105315
PyPIdjango-haystack3.4.0GHSA-r3hx-x5rh-p9vv
Ubuntu:22.04:LTSdjango-haystackno fix listedUBUNTU-CVE-2026-105315
Ubuntu:24.04:LTSdjango-haystackno fix listedUBUNTU-CVE-2026-105315
Ubuntu:26.04:LTSdjango-haystackno fix listedUBUNTU-CVE-2026-105315
Ubuntu:26.10django-haystackno fix listedUBUNTU-CVE-2026-105315

Affected products (as reported)

VendorProductVersions
n/a django-haystack 3.03.13.23.3.0

Weakness: CWE-95, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References