CVE-2026-112342

Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permissionhelper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the cache...

EUVD-2026-109121

Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permissionhelper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the cache...

PT-2026-122198

Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the cach...