CVE-2026-18941: Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication

Severity: high (CVSS 7.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-10 · updated 2026-10-19
Weakness: CWE-306

Description

A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This default allows unauthenticated and unauthorized access to feature-server, registry-server, and offline-server endpoints. A remote attacker, by exploiting this missing authentication, could achieve remote code execution (RCE) by storing a malicious User-Defined Function (UDF) on the feature-server, trigger a denial of service (DoS) by forcing re-materialization of all tenant features, and gain unauthorized access to cross-tenant data.

Affected products

Red Hat OpenShift AI 2.25: all versions — fixed in 1786110051
Red Hat OpenShift AI 3.3: all versions — fixed in 1786110033
Red Hat OpenShift AI 3.4: all versions — fixed in 1786107278, 1791833225, 1791868194, 1791868238

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 2.25 1786110051; Red Hat OpenShift AI 3.3 1786110033; Red Hat OpenShift AI 3.4 1786107278, 1791833225, 1791868194, 1791868238. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-18941 or the next vulnerability affects your stack