What is the CVSS score of CVE-2026-23536?

CVE-2026-23536 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Red Hat Openshift Ai Rhoai are affected by CVE-2026-23536?

A critical vulnerability in Feast Feature Server allows unauthorized attackers to read sensitive files from affected Red Hat OpenShift AI systems without authentication.

How to fix or mitigate CVE-2026-23536?

Within 24 hours: Identify all Red Hat OpenShift AI deployments in your environment and validate which versions are running Feast Feature Server; immediately restrict network access to the `/read-document` endpoint to trusted sources only. Within 7 days: Implement Web Application Firewall (WAF) rules to block path traversal attempts on the endpoint; conduct an audit of file system permissions to limit what the server process can access; review logs for suspicious `/read-document` requests. Within 30 days: Contact Red Hat for patch availability and deployment timeline; prepare deployment plan for patches; conduct security assessment of affected systems and rotate any credentials that may have been exposed.

Red Hat Openshift Ai Rhoai CVE-2026-23536

EUVD-2026-13816 HIGH

Path Traversal (CWE-22)

2026-03-20 redhat

GHSA-9p47-cwvm-h4hj

Path Traversal Red Hat Openshift Ai Rhoai

7.5

CVSS 3.1 · Vendor: redhat

Severity by source

Vendor (redhat) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Red Hat

7.5 HIGH

qualitative

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 20, 2026 - 22:16 euvd

EUVD-2026-13816

Analysis Generated

Mar 20, 2026 - 22:16 vuln.today

CVE Published

Mar 20, 2026 - 21:58 nvd

HIGH 7.5

DescriptionCVE.org

A security issue was discovered in the Feast Feature Server's /read-document endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a specially crafted HTTP POST request, an attacker can bypass intended access restrictions to potentially retrieve sensitive system files, application configurations, and credentials.

AnalysisAI

The Feast Feature Server contains a path traversal vulnerability in its /read-document endpoint that allows unauthenticated remote attackers to read arbitrary files accessible to the server process, including sensitive system files, application configurations, and credentials. Red Hat OpenShift AI (RHOAI) deployments are confirmed affected across multiple versions. The vulnerability is rated 7.5 (High) with network-based exploitation requiring no authentication or user interaction, though no active exploitation (KEV) or public proof-of-concept is currently documented.

Technical ContextAI

Feast is an open-source feature store for machine learning that manages and serves features to ML models. The vulnerability affects Red Hat OpenShift AI (RHOAI) implementations as evidenced by multiple CPE entries (cpe:2.3:a:red_hat:red_hat_openshift_ai_(rhoai)). The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), commonly known as path traversal or directory traversal. The /read-document endpoint fails to properly validate or sanitize user-supplied file paths in HTTP POST requests, allowing attackers to use techniques such as '../' sequences to escape intended directory restrictions and access files anywhere on the filesystem that the server process has read permissions for.

RemediationAI

Organizations running affected versions of Red Hat OpenShift AI should immediately consult the official Red Hat security advisory at https://access.redhat.com/security/cve/CVE-2026-23536 and apply available patches or updates as specified by the vendor. Review the Red Hat Bugzilla entry at https://bugzilla.redhat.com/show_bug.cgi?id=2429302 for technical remediation details and patched versions. As an immediate temporary mitigation until patching is complete, restrict network access to the Feast Feature Server's /read-document endpoint using firewall rules, web application firewall (WAF) policies, or API gateway controls to allow only authenticated and authorized internal services. Implement network segmentation to isolate ML infrastructure from untrusted networks, deploy monitoring to detect suspicious file access patterns or path traversal attempts in HTTP POST requests, and conduct an audit of files potentially accessed by the server process to identify any credential or configuration files that may have been exposed.