Exploitation Summary
EIP tracks 2 public exploits for CVE-2026-25964. PoCs published by XiaomingX, drkim-dev.
AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2026-25964, an authenticated local file disclosure vulnerability in Tandoor Recipes. The exploit leverages path traversal in the RecipeImport workflow to read arbitrary files on the server.
Description
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, a Path Traversal vulnerability in the RecipeImport workflow of Tandoor Recipes allows authenticated users with import permissions to read arbitrary files on the server. This vulnerability stems from a lack of input validation in the file_path parameter and insufficient checks in the Local storage backend, enabling an attacker to bypass storage directory restrictions and access sensitive system files (e.g., /etc/passwd) or application configuration files (e.g., settings.py), potentially leading to full system compromise. This vulnerability is fixed in 2.5.1.
Exploits (2)
This repository contains a functional proof-of-concept for CVE-2026-25964, an authenticated local file disclosure vulnerability in Tandoor Recipes. The exploit leverages path traversal in the RecipeImport workflow to read arbitrary files on the server.
This repository provides a detailed technical analysis of CVE-2026-25964, an authenticated local file disclosure vulnerability in Tandoor Recipes. It includes a thorough breakdown of the vulnerability, affected code, and step-by-step proof-of-concept instructions.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N