CVE-2026-59970

Name of the Vulnerable Software and Affected Versions Tandoor Recipes versions prior to 2.6.10

Description An authenticated user can trigger a Server-Side Request Forgery (SSRF) by creating a Space and configuring an AI provider with a URL targeting an internal address. When an AI action is invoked, the application passes the administrator-controlled AI provider URL to LiteLLM, bypassing the server's outbound-request SSRF checks. The affected AI actions call completion through the endpoints "/api/ai-import/" and "/api/ai-step-sort/" in the cookbook/views/api.py file while bypassing the safe request() function. This allows the server to connect to the supplied provider URL, exposing connection success, refusal, or timeout, which acts as a blind network-reachability oracle. This can be used to reach internal services, other hosts on the server network, and cloud metadata endpoints to map reachable internal hosts and ports.

Recommendations Update Tandoor Recipes to version 2.6.10.