---
id: "CVE-2026-59963"
kind: "vulnerability"
aliases: ["CVE-2026-59963"]
title: "Tandoor Recipes: same-Space users can read other members' private recipe files"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["django", "package", "self-hosted", "shared-spaces", "tandoor-recipes"]
not_affected_if: ["no-shared-spaces", "single-user-instance", "version-2.6.10-or-later"]
published_at: "2026-10-16T20:17:23+00:00"
first_seen_at: "2026-10-23T21:57:14+00:00"
updated_at: "2026-10-25T03:36:26+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59963", "first_seen_at": "2026-10-23T21:57:14+00:00"}]
---

# Tandoor Recipes: same-Space users can read other members' private recipe files

Tandoor Recipes lets an authenticated member of a shared Space pass another member's private recipe ID to the AI import, file, external-link, or share-link endpoints, and those endpoints skip the owner and sharing checks. An attacker can read private recipe files and uploaded content, send them to the configured AI provider, or create public share links.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Tandoor version; affected releases are earlier than `2.6.10`
- Confirm whether Space sharing is enabled and whether multiple users share a Space
- Review the `api/ai-import/`, `api/get_recipe_file/`, `api/get_external_file_link/` and `api/share-link/` endpoints in access logs for requests referencing recipes owned by other users

## Fix

- Upgrade Tandoor Recipes to `2.6.10` or later
- If upgrading is delayed, disable Space sharing or restrict who can join shared Spaces
- Rotate any AI provider keys and review share links if exposure is suspected

## Timeline

- 2026-10-23T21:57:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-59963

## From the sources

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/, api/get_external_file_link/, api/share-link/, CustomRecipePermission. The attack works because the endpoints read private recipe files, send file bytes to the configured AI provider, or create and disclose external links without object-level authorization, and api/share-link/ can create a public link when Space sharing is enabled. This can expose private recipe files and sensitive uploaded content to another same-Space user and to configured external services. This issue is fixed in version 2.6.10.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_