CVE-2026-35488 | TandoorRecipes recipes up to 2.6.3 CustomIsShared.has_object_permission routine

A vulnerability, which was classified as problematic, was found in TandoorRecipes recipes up to 2.6.3. This vulnerability affects the function CustomIsShared.has_object_permission. Executing a manipulation can lead to exposed dangerous routine.

This vulnerability appears as CVE-2026-35488. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.