Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, a Path Traversal vulnerability in the RecipeImport workflow of Tandoor Recipes allows authenticated users with import permissions to read arbitrary files on the server. This vulnerability stems from a lack of input validation in the file_path parameter and insufficient checks in the Local storage backend, enabling an attacker to bypass storage directory restrictions and access sensitive system files (e.g., /etc/passwd) or application configuration files (e.g., settings.py), potentially leading to full system compromise. This vulnerability is fixed in 2.5.1.
References
| Link | Resource |
|---|---|
| https://github.com/TandoorRecipes/recipes/commit/f7f3524609451ab0b5a4fd760ad0af147d8ed794 | Patch |
| https://github.com/TandoorRecipes/recipes/releases/tag/2.5.1 | Product Release Notes |
| https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-6485-jr28-52xx | Exploit Vendor Advisory |
Configurations
History
17 Feb 2026, 16:07
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:tandoor:recipes:*:*:*:*:*:*:*:* | |
| References | () https://github.com/TandoorRecipes/recipes/commit/f7f3524609451ab0b5a4fd760ad0af147d8ed794 - Patch | |
| References | () https://github.com/TandoorRecipes/recipes/releases/tag/2.5.1 - Product, Release Notes | |
| References | () https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-6485-jr28-52xx - Exploit, Vendor Advisory | |
| First Time |
Tandoor
Tandoor recipes |
13 Feb 2026, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-13 19:17
Updated : 2026-02-17 16:07
NVD link : CVE-2026-25964
Mitre link : CVE-2026-25964
CVE.ORG link : CVE-2026-25964
JSON object : View
Products Affected
tandoor
- recipes