Live › vulnerability › CVE-2026-59963
Go to dashboardTandoor Recipes lets an authenticated member of a shared Space pass another member's private recipe ID to the AI import, file, external-link, or share-link endpoints, and those endpoints skip the owner and sharing checks. An attacker can read private recipe files and uploaded content, send them to the configured AI provider, or create public share links.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Self-hosted or managed Tandoor instances running a version before where users share a Space and private recipes exist. Single-user instances, or instances without shared Spaces, have no other same-Space member to exploit it.
2.6.10No product ranges from the sources yet.
2.6.10api/ai-import/, api/get_recipe_file/, api/get_external_file_link/ and api/share-link/ endpoints in access logs for requests referencing recipes owned by other users2.6.10 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/, api/get_external_file_link/, api/share-link/, CustomRecipePermission. The attack works because the endpoints read private recipe files, send file bytes to the configured AI provider, or create and disclose external links without object-level authorization, and api/share-link/ can create a public link when Space sharing is enabled. This can expose private recipe files and sensitive uploaded content to another same-Space user and to configured external services. This issue is fixed in version 2.6.10.
This page as .md · .json · in your agent: get_signal("CVE-2026-59963")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.