CVE-2026-35046 Tandoor has a Stored CSS Injection via <style> Tag in Recipe Instructions (API-Level)

Medium 5.4 Published 6 Apr 2026 Updated 7 Apr 2026

Authenticated users can inject CSS into recipes, enabling UI redressing and data exfiltration in clients rendering API output.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2026-35046?

CVE-2026-35046 is a medium-severity cross-site scripting vulnerability in TandoorRecipes recipes, published on 6 Apr 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, Tandoor Recipes allows authenticated users to inject arbitrary <style> tags into recipe step instructions. The bleach.clean() sanitizer explicitly whitelists the <style> tag, causing the backend to persist and serve unsanitized CSS payloads via the API. Any client consuming instructions_markdown from the API and rendering it as HTML without additional sanitization will execute attacker-controlled CSS — enabling UI redressing, phishing overlays, visual defacement, and CSS-based data exfiltration. This vulnerability is fixed in 2.6.4.

Weakness: CWE-79

Which versions are affected by CVE-2026-35046?

It affects 1 product.

Products include Tandoor Recipes.

How do I fix CVE-2026-35046?

No fix has been published for CVE-2026-35046 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2026-35046 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-35046 exists.

Sources

Also known as GHSA-9hhh-g2fc-r8x2.