{"id":"CVE-2026-18941","title":"Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication","summary":"A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is \"no_auth,\" meaning no security manager is installed. This default allows unauthenticated and unauthorized access to …","severity":"high","cvss":7.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-306"],"vendor":"Red Hat","product":"rhoai/odh-feature-server-rhel9","affected":["rhoai/odh-feature-server-rhel9 (all versions)","rhoai/odh-feature-server-rhel9 (all versions)","rhoai/odh-feature-server-rhel9 (all versions)","rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 (all versions)","rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 (all versions)","rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 (all versions)","rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-08-11T17:41:13.353798Z"},"published":"2026-08-10","updated":"2026-10-19","sourceUpdated":"2026-10-19T11:10:07.013Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-18941","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:53261","label":"RHSA-2026:53261"},{"url":"https://access.redhat.com/errata/RHSA-2026:53262","label":"RHSA-2026:53262"},{"url":"https://access.redhat.com/errata/RHSA-2026:53263","label":"RHSA-2026:53263"},{"url":"https://access.redhat.com/errata/RHSA-2026:84734","label":"RHSA-2026:84734"},{"url":"https://access.redhat.com/security/cve/CVE-2026-18941"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511116","label":"RHBZ#2511116"}],"tags":["cve.org"],"epss":0.00827,"epssPercentile":0.56676,"ingestedAt":"2026-10-19T12:27:23.804Z","slug":"CVE-2026-18941","body":"## Overview\n\nA flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is \"no_auth,\" meaning no security manager is installed. This default allows unauthenticated and unauthorized access to feature-server, registry-server, and offline-server endpoints. A remote attacker, by exploiting this missing authentication, could achieve remote code execution (RCE) by storing a malicious User-Defined Function (UDF) on the feature-server, trigger a denial of service (DoS) by forcing re-materialization of all tenant features, and gain unauthorized access to cross-tenant data.\n\n## Affected\n\n- `rhoai/odh-feature-server-rhel9 (all versions)`\n- `rhoai/odh-feature-server-rhel9 (all versions)`\n- `rhoai/odh-feature-server-rhel9 (all versions)`\n- `rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 (all versions)`\n- `rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 (all versions)`\n- `rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 (all versions)`\n- `rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9`\n- `rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9`\n- `rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9`\n- `rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9`\n- `rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9`\n- `rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9`\n- `rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9`\n- `rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9`\n- `rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9`\n- `rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nTo mitigate this vulnerability, configure Feast deployments to utilize Kubernetes RBAC authentication. Ensure that `FeatureStore` Custom Resources (CRs) explicitly define an authentication mechanism other than `no_auth`. For Feast SDK usage, avoid the `no_auth` setting in production environments unless `FEAST_INSECURE_NO_AUTH=1` is explicitly set, acknowledging the security implications. Applying these configuration changes will require a redeployment or restart of the affected Feast services.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.4,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}