A vulnerability marked as critical has been reported in Tandoor Recipes up to 2.5.0. This impacts an unknown function. This manipulation of the argument file_path causes path traversal.
This vulnerability is tracked as CVE-2026-25964. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
