What is the CVSS score of CVE-2026-33149?

CVE-2026-33149 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Python are affected by CVE-2026-33149?

Tandoor Recipes versions through 2.5.3 contain a host header validation flaw that allows authenticated administrators to be socially engineered into distributing invite tokens to attacker-controlled…

How to fix or mitigate CVE-2026-33149?

Within 24 hours: Audit ALLOWED_HOSTS configuration in all Tandoor Recipes deployments and restrict to explicit, trusted hostnames (remove wildcard '*' setting); document current administrator activity and any unusual invite link activity. Within 7 days: Review recent invite email logs for any unintended recipient domains; communicate security advisory to all administrative users with training on host header manipulation social engineering. Within 30 days: Monitor vendor advisories for patched version release; evaluate upgrading to patched version immediately upon availability (current versions through 2.5.3 remain affected).

Python CVE-2026-33149

EUVD-2026-16313 HIGH

Improper Neutralization of HTTP Headers for Scripting Syntax (CWE-644)

2026-03-26 GitHub_M

Python Information Disclosure

8.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.1 HIGH

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:23 vuln.today

cvss_changed

EUVD ID Assigned

Mar 26, 2026 - 19:16 euvd

EUVD-2026-16313

Analysis Generated

Mar 26, 2026 - 19:16 vuln.today

CVE Published

Mar 26, 2026 - 18:53 nvd

HIGH 8.1

DescriptionGitHub Advisory

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Versions up to and including 2.5.3 set ALLOWED_HOSTS = '*' by default, which causes Django to accept any value in the HTTP Host header without validation. The application uses request.build_absolute_uri() to generate absolute URLs in multiple contexts, including invite link emails, API pagination, and OpenAPI schema generation. An attacker who can send requests to the application with a crafted Host header can manipulate all server-generated absolute URLs. The most critical impact is invite link poisoning: when an admin creates an invite and the application sends the invite email, the link points to the attacker's server instead of the real application. When the victim clicks the link, the invite token is sent to the attacker, who can then use it at the real application. As of time of publication, it is unknown if a patched version is available.

AnalysisAI

Tandoor Recipes versions through 2.5.3 permit Host header injection attacks that enable invite link poisoning, allowing authenticated administrators with high privileges to be social-engineered into sending system-generated invite tokens to attacker-controlled servers. The Django application's default ALLOWED_HOSTS='*' configuration fails to validate HTTP Host headers, which combined with request.build_absolute_uri() usage allows manipulation of all absolute URLs including invite emails, API pagination, and OpenAPI schemas. No public exploit identified at time of analysis; CVSS 8.1 reflects network-based attack requiring high privileges and user interaction with changed scope.

Technical ContextAI

The vulnerability stems from CWE-644 (Improper Neutralization of HTTP Headers for Scripting Syntax) in Tandoor Recipes, a Python-based Django web application for recipe management (CPE: cpe:2.3:a:tandoorrecipes:recipes:*:*:*:*:*:*:*:*). Django's ALLOWED_HOSTS setting acts as a security control to validate the Host header in HTTP requests, preventing Host header injection attacks. When set to the wildcard '*', Django accepts any Host header value without validation. The application uses Django's request.build_absolute_uri() method to construct absolute URLs, which incorporates the Host header value. This affects multiple application contexts: invite link generation in email notifications, API pagination URLs, and OpenAPI schema generation. An attacker can craft malicious Host headers that propagate through these URL construction mechanisms, causing the application to generate URLs pointing to attacker-controlled domains instead of the legitimate application server.

RemediationAI

As of the publication date, patched version availability is unknown per the CVE description. Organizations should monitor the vendor security advisory at https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-x636-4jx6-xc4w for patch release announcements. As an interim mitigation, modify the Django configuration to set ALLOWED_HOSTS to an explicit list of legitimate domain names and IP addresses instead of the wildcard '*' value, ensuring only trusted Host header values are accepted. Deploy the application behind a reverse proxy (nginx, Apache, or cloud load balancer) configured to validate and normalize the Host header before forwarding requests to the Django application. Implement additional email security controls such as adding warning banners to invite emails that display the full URL and educating administrators to verify link destinations before clicking. Restrict invite creation permissions to the minimum necessary administrator accounts and implement audit logging for all invite generation activities. Consider implementing URL allowlisting in email templates to detect and block generation of invite links pointing to non-organizational domains.