Is CVE-2026-59970 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-59970 being exploited in the wild.

How severe is CVE-2026-59970?

High severity, with a CVSS score of 7.7, published 16 October 2026.

How is CVE-2026-59970 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-59970?

Check whether you run Tandoor Recipes at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-59970: Tandoor Recipes SSRF in AI provider configuration

CVE-2026-59970 · Severity: high · CVSS 7.7 · Published 2026-10-16

Tandoor Recipes is a web application for managing recipes, meal planning, and shopping lists. Prior to version 2.6.10, authenticated users could configure AI providers with URLs pointing to internal services, allowing attackers to map internal network topology and reach cloud metadata endpoints through a blind SSRF oracle that reveals connection success or failure.

Technologies: Tandoor Recipes. Vendors: Tandoor Recipes.

Quick answers

Is CVE-2026-59970 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-59970 being exploited in the wild.
How severe is CVE-2026-59970?: High severity, with a CVSS score of 7.7, published 16 October 2026.
Which products and versions are affected?: Tandoor Recipes before 2.6.10.
Is there a fix for CVE-2026-59970?: Yes: fixed in 2.6.10. Until then: If upgrading is not immediately possible, restrict access to the Space and AI provider configuration endpoints to trusted administrators only, and configure firewall rules to block outbound connections from the Tandoor application server to internal network segments and cloud metadata endpoints. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-59970 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-59970?: Check whether you run Tandoor Recipes at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 2.6.10

If upgrading is not immediately possible, restrict access to the Space and AI provider configuration endpoints to trusted administrators only, and configure firewall rules to block outbound connections from the Tandoor application server to internal network segments and cloud metadata endpoints.

Technical details

Tandoor Recipes bypasses SSRF protection checks when processing AI provider URLs in the Space creation workflow. The vulnerable code in cookbook/views/api.py calls LiteLLM's completion API with user-supplied URLs without invoking the server's safe_request validation. An authenticated attacker can trigger AI actions (ai-import, ai-step-sort) against arbitrary targets, gaining a blind network reachability oracle that leaks internal service availability through connection timeouts, refusals, or successes.

Affected products

Tandoor Recipes Tandoor Recipes before 2.6.10

Timeline

2026-10-16: disclosed
2026-06-21: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.