What’s Vulnerable › Vulnerabilities

CVE-2026-115810: Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-23 · updated 2026-10-29
• Weakness: CWE-918

Description

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file. Attackers can exploit the raw requests.get call in cookbook/integration/pestle.py, which bypasses the application's centralized requests-hardened SSRF filter, to reach internal-only endpoints, perform port/service discovery, and exfiltrate internal responses via the stored recipe image.

Affected products

• TandoorRecipes recipes: from 2.0.0 before 2.7.0 — fixed in 2.7.0

How to fix

Upgrade to a fixed version: TandoorRecipes recipes 2.7.0. Check the vendor advisory for mitigations.

References

• https://github.com/TandoorRecipes/recipes/releases/tag/2.7.0
• https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-xq7g-9q95-vjc6
• https://www.vulncheck.com/advisories/tandoor-recipes-before-ssrf-via-pestle-importer-image-url
• https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-xq7g-9q95-vjc6

Get alerted when CVE-2026-115810 or the next vulnerability affects your stack