Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider with a URL targeting an internal address, and invokes an AI action. In cookbook/views/api.py, the affected AI actions call completion through TARGET/api/ai-import/ and api/ai-step-sort/ while bypassing safe_request. The attack works because the server connects to the supplied provi
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Oracle
- Product
- oracle
- CVSS
- 7.7
- Exposure class
- AI infrastructure
Why it ranks 15 (Routine)
- CVSS 7.7 high
- Product class: AI infrastructure
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-59970 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.