Skip to content
Threat Feed
Subscribe
high advisory

Tandoor Recipes: Server-side request forgery (CVE-2026-115810)

Tandoor Recipes versions before 2.7.0 are vulnerable to SSRF in the Pestle importer, allowing authenticated low-privileged users to force server-side GET requests to arbitrary internal or external targets.

CVE search metadata

CVE search record: CVE-2026-115810. Severity: high. CVSS: 7.7. EPSS: 0.24%. KEV: no. Product: Tandoor Recipes (< 2.7.0). Brief: Tandoor Recipes: Server-side request forgery (CVE-2026-115810). Brief link: https://feed.craftedsignal.io/briefs/2026-10-tandoor-recipes-ssrf-7139ca9f/

CVE search record: CVE-2026-112342. Severity: high. CVSS: 7.1. EPSS: 0.27%. KEV: no. Product: Tandoor Recipes (< 2.7.0). Brief: Tandoor Recipes: Server-side request forgery (CVE-2026-115810). Brief link: https://feed.craftedsignal.io/briefs/2026-10-tandoor-recipes-ssrf-7139ca9f/

Triage facts

Revision 1
Applicability
Tandoor Recipes (< 2.7.0)
Evidence
Unknown
Severity
High
Action
Elevated
Sources
2 public sources
Freshness
Revision 1Oct 29, 20:00 UTC
Vulnerabilities
2 CVEs
Source quality
A2Roughly even chance

What's new

  • 1. added coverage for Tandoor Recipes (< 2.7.0) Oct 29, 20:00 via nvd

Tandoor Recipes before version 2.7.0 contains a server-side request forgery (SSRF) vulnerability within its Pestle importer component. An authenticated user with low privileges can supply a malicious image URL via a Pestle JSON import file. The application fails to route this input through its centralized, hardened SSRF filter, instead executing a raw requests.get call in cookbook/integration/pestle.py. This behavior allows the server to be used as a proxy to reach internal network resources, conduct service discovery, or exfiltrate sensitive data from internal services.

Impact

Successful exploitation allows an authenticated attacker to perform port and service discovery on the internal network of the host server. Furthermore, the attacker can force the application to exfiltrate responses from internal-only endpoints back to the user through the stored recipe image.

Recommendation

  • Upgrade Tandoor Recipes to version 2.7.0 or later immediately to include the patch for CVE-2026-115810.
  • Review web server access logs for anomalous outbound requests originating from the Tandoor application host.
  • Segment the Tandoor Recipes host from sensitive internal network zones to mitigate the impact of potential SSRF exploitation.

Immediate actions

Upgrade Tandoor Recipes to 2.7.0 or later.

IT Operations 24h

Threat Hunt

Identify authenticated users importing Pestle JSON files containing unusual or internal-facing URL schemes in image fields.

T1595.005 high high confidence hunt now

Data: Application logs showing Pestle import events, Web server egress logs

Identify rapid space switching followed by administrative access logs

T1068 medium medium confidence hunt now

Data: Application audit logs recording user ID, target space ID, and requested endpoint

Mitigations

Upgrade to Tandoor Recipes 2.7.0

immediate IT Operations

CVE-2026-115810

Upgrade Tandoor Recipes to 2.7.0 or later

immediate IT Operations

CVE-2026-112342