Tandoor Recipes afectado por Blind SSRF con Acceso a la Red Interna a través de la Importación de Recetas

The SSRF vulnerability in Tandoor Recipes allows an authenticated user to bypass security controls and initiate requests to internal services or external websites on behalf of the application server. This could expose sensitive internal data, such as database credentials or API keys, if the server has access to them. An attacker could also use this vulnerability to scan internal networks, perform port scanning, or potentially exploit other vulnerabilities in internal systems. The blind nature of the SSRF means that the attacker may not directly see the response, but can still infer information about the target system based on the server's behavior.

Organizations using Tandoor Recipes for recipe management and meal planning are at risk, particularly those with standard users who have access to the Cookmate recipe import feature. Shared hosting environments where multiple users share the same Tandoor Recipes instance are also at increased risk, as a compromised user account could be used to exploit the vulnerability.

• python / server:

# Check for vulnerable versions
python -c 'import tandoor_recipes; print(tandoor_recipes.__version__)'

• generic web:

# Check for Cookmate integration endpoint
curl -I http://your-tandoor-recipes-server/cookbook/integration/cookmate.py

1. 2026-02-13Disclosure

   disclosure

1. Reservado2026-02-09
2. Publicada2026-02-13
3. EPSS actualizado2026-03-23

The primary mitigation for CVE-2026-25991 is to upgrade Tandoor Recipes to version 2.5.1 or later, which includes the necessary URL validation fixes. If upgrading immediately is not possible, consider implementing temporary workarounds such as restricting outbound network access for the Tandoor Recipes application server using a firewall or network segmentation. Additionally, implement strict input validation on all URLs used by the Cookmate recipe import feature. Monitor application logs for unusual outbound requests originating from the Tandoor Recipes application. After upgrading, confirm the fix by attempting to import a recipe from an external URL and verifying that the application does not connect to unintended destinations.