CyberSecBulletin

Tandoor Recipes vulnerabilities

We track 1 vulnerability in Tandoor Recipes products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Tandoor Recipes vulnerabilities

  • 7.1 High severity

    Tandoor Recipes: Incorrect Authorization

    CVE-2026-112342Tandoor Recipes

    Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omi