Cross-Space Permission Issue in Tandoor Recipes by Tandoor

CVE-2026-112342

What is CVE-2026-112342?

Tandoor Recipes prior to version 2.7.0 contains a vulnerability due to improper cache-key design in its permission management system. Authenticated users can exploit this issue by maintaining stale group-based permissions across different spaces. This happens because the cache key only uses the user ID without considering the active space. As a result, attackers can attain unwanted admin privileges by creating their own space and then switching to a victim's space. This allows them to bypass group revocations and access various permission classes and views without proper authorization.

References