CVE-2026-59970 SSRF ciego en la URL del proveedor de IA de Tandoor Recipes

Afectados

• TandoorRecipes recipes

  < 2.6.10

Qué hacer

1. Verificá si usás recipes y en qué versión.
2. Actualizá a la versión corregida que indique el fabricante en su aviso o aplicá su mitigación.
3. Revisá registros y accesos de los sistemas expuestos para descartar un uso previo.

Calculadora CVSS

CVSS 3.1 · 7.7 ALTA

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

• Vector de ataqueRed
• Complejidad del ataqueBaja
• Privilegios requeridosBajos
• Interacción del usuarioNinguna
• AlcanceCambiado
• ConfidencialidadAlta
• IntegridadNinguna
• DisponibilidadNinguna

Descripción original

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider with a URL targeting an internal address, and invokes an AI action. In cookbook/views/api.py, the affected AI actions call completion through TARGET/api/ai-import/ and api/ai-step-sort/ while bypassing safe_request. The attack works because the server connects to the supplied provider URL from each AI action and exposes connection success, refusal, or timeout as a blind network-reachability oracle. This can reach internal services, other hosts on the server network, and cloud metadata endpoints and map reachable internal hosts and ports. This issue is fixed in version 2.6.10.

Referencias (3)

• github.com/TandoorRecipes/recipes/security/advisories/GHSA-wq4h-2r8x-cv65
• github.com/TandoorRecipes/recipes/commit/79e783578a5b198a988eb9b486ba19f93df4cfa4
• github.com/TandoorRecipes/recipes/releases/tag/2.6.10

Resumen traducido automáticamente de la descripción original. Fuente: Nureq Monitor. Cómo funciona.