CVE-2026-112342Published
Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-112342 · Microsoft / collected KEV context
cve-program · CVE-2026-112342
- https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-69q3-5q6x-7hmx
- https://github.com/TandoorRecipes/recipes/releases/tag/2.7.0
- https://github.com/TandoorRecipes/recipes/commit/1285f5009aa166c0d6f8658849eed5686294d5e9
- https://www.vulncheck.com/advisories/tandoor-recipes-cross-space-permission-cache-poisoning
Related operational evidence
Explicit CVE identifiers- Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning · Newly collected advisory · 23 Oct 2026