CVE-2026-18941High· 7.7▾ TwilightA flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This default allows unauthenticated and unauthorized access to …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.8%
A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This default allows unauthenticated and unauthorized access to feature-server, registry-server, and offline-server endpoints. A remote attacker, by exploiting this missing authentication, could achieve remote code execution (RCE) by storing a malicious User-Defined Function (UDF) on the feature-server, trigger a denial of service (DoS) by forcing re-materialization of all tenant features, and gain unauthorized access to cross-tenant data.
rhoai/odh-feature-server-rhel9 (all versions)rhoai/odh-feature-server-rhel9 (all versions)rhoai/odh-feature-server-rhel9 (all versions)rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 (all versions)rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 (all versions)rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 (all versions)rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
To mitigate this vulnerability, configure Feast deployments to utilize Kubernetes RBAC authentication. Ensure that FeatureStore Custom Resources (CRs) explicitly define an authentication mechanism other than no_auth. For Feast SDK usage, avoid the no_auth setting in production environments unless FEAST_INSECURE_NO_AUTH=1 is explicitly set, acknowledging the security implications. Applying these configuration changes will require a redeployment or restart of the affected Feast services.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-18947High· 8.5Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization
CVE-2026-18948Critical· 9.9A flaw was found in Feast
CVE-2026-109969Medium· 4.7A flaw was found in the clevis PKCS#11 pin
CVE-2025-12548Critical· 9.0A flaw was found in Eclipse Che che-machine-exec
CVE-2018-25246High· 7.5Wikipedia 12.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search functionality
CVE-2026-103314High· 7.4Stackrox: stackrox: saml response replay allows multiple central authentication tokens