Vulnerability · Published Oct 23, 2026 · Assigned by VulnCheck

CVE-2026-115810Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL

High 7.7

In plain English

A high-severity server-side request forgery in recipes from TandoorRecipes. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)7.7High

Exploit odds (30 days)0.4%top 67.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file. Attackers can exploit the raw requests.get call in cookbook/integration/pestle.py, which bypasses the application's centralized requests-hardened SSRF filter, to reach internal-only endpoints, perform port/service discovery, and exfiltrate internal responses via the stored recipe image.

Affected products (as reported)

Vendor	Product	Versions
TandoorRecipes	recipes	2.0.0 – before 2.7.0

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

References

Vendor Patch patch, release-notes
Vendor Advisory vendor-advisory
VulnCheck Advisory: Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL third-party-advisory