---
id: CVE-2026-18941
title: >-
  Feast: feast-operator: feast: default authentication mode is no_auth — shared
  multi-tenant instances deployed without authentication
summary: >-
  A flaw was found in Feast and feast-operator. The default configuration for
  both the Feast SDK and the feast-operator is "no_auth," meaning no security
  manager is installed. This default allows unauthenticated and unauthorized
  access to …
severity: high
cvss: 7.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-306
vendor: Red Hat
product: rhoai/odh-feature-server-rhel9
affected:
  - rhoai/odh-feature-server-rhel9 (all versions)
  - rhoai/odh-feature-server-rhel9 (all versions)
  - rhoai/odh-feature-server-rhel9 (all versions)
  - rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 (all versions)
  - rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 (all versions)
  - rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 (all versions)
  - rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
  - rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
  - rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
  - rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
  - rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
  - rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
  - rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
  - rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
  - rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
  - rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-08-11T17:41:13.353798Z'
published: '2026-08-10'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T11:10:07.013Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-18941'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2026:53261'
    label: 'RHSA-2026:53261'
  - url: 'https://access.redhat.com/errata/RHSA-2026:53262'
    label: 'RHSA-2026:53262'
  - url: 'https://access.redhat.com/errata/RHSA-2026:53263'
    label: 'RHSA-2026:53263'
  - url: 'https://access.redhat.com/errata/RHSA-2026:84734'
    label: 'RHSA-2026:84734'
  - url: 'https://access.redhat.com/security/cve/CVE-2026-18941'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2511116'
    label: RHBZ#2511116
tags:
  - cve.org
epss: 0.00827
epssPercentile: 0.56736
ingestedAt: '2026-10-19T12:27:23.804Z'
---

## Overview

A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This default allows unauthenticated and unauthorized access to feature-server, registry-server, and offline-server endpoints. A remote attacker, by exploiting this missing authentication, could achieve remote code execution (RCE) by storing a malicious User-Defined Function (UDF) on the feature-server, trigger a denial of service (DoS) by forcing re-materialization of all tenant features, and gain unauthorized access to cross-tenant data.

## Affected

- `rhoai/odh-feature-server-rhel9 (all versions)`
- `rhoai/odh-feature-server-rhel9 (all versions)`
- `rhoai/odh-feature-server-rhel9 (all versions)`
- `rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 (all versions)`
- `rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 (all versions)`
- `rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 (all versions)`
- `rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9`
- `rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9`
- `rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9`
- `rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9`
- `rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9`
- `rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9`
- `rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9`
- `rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9`
- `rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9`
- `rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

To mitigate this vulnerability, configure Feast deployments to utilize Kubernetes RBAC authentication. Ensure that `FeatureStore` Custom Resources (CRs) explicitly define an authentication mechanism other than `no_auth`. For Feast SDK usage, avoid the `no_auth` setting in production environments unless `FEAST_INSECURE_NO_AUTH=1` is explicitly set, acknowledging the security implications. Applying these configuration changes will require a redeployment or restart of the affected Feast services.