What is the CVSS score of EUVD-2026-55816?

EUVD-2026-55816 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-55816?

Yes, a patch is available for EUVD-2026-55816. Update the affected software to the latest version immediately.

Feast Operator EUVD-2026-55816

| CVE-2026-18942 MEDIUM

Code Injection (CWE-94)

2026-08-10 redhat

GHSA-55p8-2553-ch47

RCE Kubernetes Code Injection Red Hat Openshift Ai Rhoai Red Hat

5.5

CVSS 3.1 · Vendor: redhat

Severity by source

Vendor (redhat) PRIMARY

5.5 MEDIUM

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L

vuln.today AI

8.0 HIGH

Scope changed to S:C because successful exploitation elevates the attacker from tenant context to Kubernetes cluster-admin, crossing a clear security boundary; I:H and A:H reflect full cluster control.

3.1 AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:H

Red Hat

5.5 HIGH

qualitative

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Aug 10, 2026 - 21:39 vuln.today

DescriptionCVE.org

A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with elevated privileges, allowing the tenant to steal sensitive credentials. This could lead to a direct escalation of privileges, granting the tenant administrative control over the Kubernetes cluster.

AnalysisAI

Code injection in the Feast operator within Red Hat OpenShift AI (RHOAI) allows an authenticated, high-privileged tenant to embed malicious code into their feature repository, which an automated operator process then executes under elevated Kubernetes RBAC permissions. Successful exploitation yields credential theft and full cluster administrative control, representing a critical privilege escalation pathway despite the moderate vendor CVSS score of 5.5. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.

Technical ContextAI

Feast is an open-source feature store for machine learning, and its Kubernetes operator automates lifecycle management of Feast deployments - including reconciling feature repository state as part of its control loop. In Red Hat OpenShift AI (RHOAI), the Feast operator runs with elevated Kubernetes RBAC permissions (ServiceAccount-bound ClusterRoles or similar) necessary to manage cluster-wide resources. The root cause is that the operator does not safely isolate or sandbox the execution of code sourced from tenant-controlled feature repositories, creating a server-side code injection path. No CWE was assigned by the reporter, but this pattern closely aligns with CWE-94 (Improper Control of Generation of Code / Code Injection) or CWE-250 (Execution with Unnecessary Privileges). The affected product is identified in CPE as cpe:2.3:a:red_hat:red_hat_openshift_ai_(rhoai):*:*:*:*:*:*:*:*, indicating all currently tracked RHOAI versions are within scope.

RemediationAI

Consult the Red Hat security advisory at https://access.redhat.com/security/cve/CVE-2026-18942 for the official patch guidance; no specific fixed version number is independently confirmed from the available data at time of analysis. Until a patched RHOAI release is applied, compensating controls should focus on restricting tenant access to the Feast operator's feature repository write path - specifically, limit which users or service accounts can submit or modify feature repository content that the operator will reconcile. Auditing existing feature repositories for unauthorized or suspicious code artifacts is advisable as a detection measure. Organizations should also review the RBAC permissions granted to the Feast operator ServiceAccount and apply least-privilege principles where possible, reducing the blast radius of any execution the operator performs. Track the Bugzilla issue at https://bugzilla.redhat.com/show_bug.cgi?id=2511118 for patch availability updates.