CVE-2026-33153 is an information disclosure issue in Tandoor Recipes (affected: versions prior to 2.6.0) where the Recipe API endpoint accepts a hidden ?debug=true query parameter. When enabled, it returns the complete raw SQL query being executed, including schema details and authorization-related filtering logic, even though the application is running in production mode (DEBUG=False). Any authenticated user (not just admins) can trigger it, enabling low-privilege attackers to map the database structure and infer how access control is implemented.
Technically, the vulnerability is in cookbook/views/api.py within the RecipeViewSet.list() method. The code checks self.request.GET.get('debug', False) and, if present, immediately returns a JSON response containing str(self.get_queryset().query), which is the full SQL statement for the queryset. The advisory notes there is no verification of Django settings.DEBUG, no privilege check (e.g., staff/superuser), and no rate limiting or audit logging around this behavior. The attack vector is network-based and requires authentication only. Exploitation is straightforward: an attacker authenticates as any valid user, then calls the recipe listing endpoint with debug=true (example path shown in the reference: /api/recipe/?debug=true&format=json). The response includes the raw SQL text, revealing table/column names, JOIN relationships, WHERE conditions (including access control logic), and multi-tenant “space” IDs.
Impact: An attacker can use the leaked SQL to enumerate the database schema and reverse-engineer authorization logic, which can materially increase the likelihood of subsequent attacks (e.g., targeted data access attempts, logic abuse, or more effective exploitation of other weaknesses). While the CVSS vector indicates no direct integrity/availability impact (I:N/A:N) and the primary risk is confidentiality (C:H), the blast radius is broad for any deployment where the endpoint is reachable and the application version is < 2.6.0. The provided CVSS score is 6.5 (medium) with PR:L (low privilege required) and AC:L (low complexity), reflecting that any authenticated user can trigger the leak.
Mitigation: Upgrade Tandoor Recipes to version 2.6.0 or later, which patches the issue. The release notes also mention: “improved debug parameter for recipe search only available to admins in DEBUG mode” as part of the fix for GHSA-f83r-v3h5-pchf. As an immediate workaround for unpatched systems, remove or disable the ability for non-admin users to use the debug query parameter and ensure the debug behavior is gated by Django DEBUG/appropriate privilege checks (the advisory specifically calls out the lack of these checks in the vulnerable code). For detection guidance, monitor for requests to the recipe API endpoint containing debug=true from authenticated users, and prioritize investigation on deployments running versions prior to 2.6.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-89