diff --git a/flask_security/views.py b/flask_security/views.py
index d07bc0d..f7e94b2 100644
--- a/flask_security/views.py
+++ b/flask_security/views.py
@@ -301,6 +301,7 @@ def change_password():
                             get_url(_security.post_login_view))
 
     if request.json:
+        form.user = current_user
         return _render_json(form)
 
     return render_template(config_value('CHANGE_PASSWORD_TEMPLATE'),