CVE-2026-59970 TandoorRecipes CVE debrief

Who should care

Defenders responsible for Tandoor Recipes deployments, administrators, and security teams should assess exposure and prioritize remediation. They should review AI provider configurations, verify exposure of internal services, and upgrade to version 2.6.10 or later to fix the vulnerability. Additionally, they should monitor AI action logs for suspicious activity and implement additional security controls to prevent unauthorized access.

Why it matters

The CVE-2026-59970 vulnerability in Tandoor Recipes allows an authenticated user to perform a blind SSRF attack via the AI provider URL, potentially exposing internal services and hosts.

• Verify exposure of internal services to potential SSRF attacks
• Review AI provider configurations to prevent unauthorized access
• Upgrade to Tandoor Recipes version 2.6.10 or later to fix the vulnerability
• Monitor AI action logs for suspicious activity

Technical summary

Tandoor Recipes passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks. An authenticated user can create a Space, configure an AI provider with a URL targeting an internal address, and invoke an AI action to map reachable internal hosts and ports. The server connects to the supplied provider URL from each AI action and exposes connection success, refusal, or timeout as a blind network-reachability oracle. This allows an attacker to potentially expose internal services and hosts. The vulnerability is fixed in version 2.6.10.

Defensive priority

Defenders should prioritize verifying exposure of internal services, reviewing AI provider configurations, and upgrading to version 2.6.10.

Recommended defensive actions

• Verify exposure of internal services by reviewing AI provider configurations and ensuring that only trusted URLs are allowed.
• Restrict AI provider URLs to only trusted external services and implement additional security controls to prevent unauthorized access.
• Upgrade to Tandoor Recipes version 2.6.10 or later to fix the vulnerability and ensure that the server's outbound-request SSRF checks are applied.
• Monitor AI action logs for suspicious activity and review logs regularly to detect potential attacks.
• Perform a thorough review of the AI provider configurations and ensure that they are properly validated and sanitized.
• Implement additional security controls, such as network segmentation and access controls, to prevent unauthorized access to internal services.
• Track exceptions and retest remediated assets to ensure that the vulnerability has been properly mitigated.

Evidence notes

The CVE record and source item provide details on the vulnerability, affected versions, and fixed version. The vulnerability was reported by a researcher who discovered that the AI provider URL was not properly validated, allowing an authenticated user to perform a blind SSRF attack. The researcher also provided additional information on the affected versions and the fixed version. The CVE record has been updated to reflect this information. However, the exact details of the vulnerability and the attack vector are limited, and further

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.