Skip to main content

Feast CVE-2026-18947

| EUVDEUVD-2026-55817 HIGH
Missing Authorization (CWE-862)
2026-08-10 redhat GHSA-mvxh-8c54-7fwx
Denial Of Service Red Hat Openshift Ai Rhoai Authentication Bypass
8.5
CVSS 3.1 · Vendor: redhat
Share

Severity by source

Vendor (redhat) PRIMARY
8.5 HIGH
AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
vuln.today AI
10.0 CRITICAL

Description explicitly states unauthenticated exploitation is possible (PR:N); 'significant resource consumption' and multi-tenant DoS warrants A:H over vendor's A:L.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H
Red Hat
8.5 HIGH
qualitative

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
High
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Aug 10, 2026 - 21:28 vuln.today
CVE Published
Aug 10, 2026 - 20:44 nvd
HIGH 8.5

DescriptionCVE.org

A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omits the feature_views field, an attacker can bypass intended permission checks. This allows an unauthenticated remote attacker, or any authenticated user, to trigger a full re-materialization of all feature views. The consequence is a Denial of Service (DoS) due to data corruption and significant resource consumption across all tenants.

AnalysisAI

Authorization bypass in Feast's materialization API endpoints within Red Hat OpenShift AI (RHOAI) permits full re-materialization of all feature views by sending a crafted request that omits the feature_views field, circumventing permission checks. The consequence is a multi-tenant Denial of Service through data corruption and significant resource exhaustion, impacting all tenants sharing the deployment. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify exposed Feast API endpoint
Delivery
Craft POST request omitting feature_views field
Exploit
Submit to /materialize or /materialize-incremental
Execution
Authorization check bypassed due to missing field
Persist
Full re-materialization triggered across all tenants
Impact
Data corruption and resource exhaustion (DoS)
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The /materialize or /materialize-incremental REST endpoints must be network-accessible to the attacker. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Multiple signals converge on elevated real-world priority for RHOAI deployments. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with network access to the RHOAI Feast API sends a POST request to the /materialize endpoint with a valid request body that deliberately omits the feature_views field. The authorization check fails to properly validate permissions without this field and proceeds, triggering a full re-materialization of every feature view across all tenants - consuming substantial compute, memory, and storage resources and potentially corrupting feature data in the online store. …
Remediation Consult the Red Hat security advisory at https://access.redhat.com/security/cve/CVE-2026-18947 for official patch guidance, as no specific patched RHOAI version is identified in the available data - patch version is not independently confirmed at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify all Red Hat OpenShift AI deployments with Feast materialization enabled and audit API access logs for suspicious requests lacking the feature_views field; document baseline API activity for anomaly detection. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Red Hat Openshift Ai Rhoai

View all
CVE-2026-18948 CRITICAL
9.9 Aug 10

Unauthenticated remote code execution affects Feast (the open-source ML feature store), where user-defined functions sto
CVE-2026-14450 CRITICAL
9.9 Aug 10

Authentication bypass in the Models-as-a-Service (MaaS) API component of Red Hat OpenShift AI (RHOAI) lets any pod alrea
CVE-2026-5483 CRITICAL
9.9 Apr 10

Kubernetes Service Account token disclosure in the odh-dashboard component of Red Hat OpenShift AI (RHOAI) lets an authe
CVE-2026-15143 CRITICAL
9.3 Jul 10

Server-side request forgery in the file_type content detector of guardrails-detectors (a component shipped with Red Hat

CVE-2026-23537 CRITICAL
9.1 Jul 01

Arbitrary file write in the Feast Feature Server's `/save-document` endpoint lets an unauthenticated remote attacker wri
CVE-2026-18951 HIGH
8.8 Aug 10

Privilege escalation in Red Hat OpenShift AI (RHOAI) training operator overlay allows any namespace editor to manage Tra
CVE-2026-18982 HIGH
8.8 Aug 10

Privilege escalation in Red Hat OpenShift AI's training-operator enables any user holding a standard Kubernetes edit or

CVE-2026-18617 HIGH
8.8 Aug 10

MySQL DSN parameter injection in Red Hat OpenShift AI's Data Science Pipelines Operator (DSPO) allows a namespace editor
CVE-2026-18950 HIGH
8.8 Aug 10

Privilege escalation in odh-dashboard, the web interface for Red Hat OpenShift AI (RHOAI), allows any authenticated dash
CVE-2026-18949 HIGH
8.8 Aug 10

Privilege escalation in odh-dashboard (Red Hat OpenShift AI) allows an attacker who has obtained the dashboard's Service
CVE-2026-13717 HIGH
8.8 Aug 10

The MaaS (Model-as-a-Service) Gateway component in Red Hat OpenShift AI (RHOAI) is improperly configured, enabling any l
CVE-2026-16745 HIGH
8.8 Jul 23

Authentication bypass in the odh-dashboard web console of Red Hat OpenShift AI (RHOAI) lets a low-privileged actor alrea

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

Share

CVE-2026-18947 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy