Tandoor Recipes

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tandoor Recipes records in CISA KEV

No Tandoor Recipes vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-79967 CVE-2026-112342

Stale permission cache in Tandoor Recipes allows cross-space access

LOW 31

Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a c…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00268 Published 2026-10-23 Fixed in 2.7.0 CWE-863

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0