CVE-2026-18947: Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

Severity: high (CVSS 8.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-10 · updated 2026-10-19
Weakness: CWE-862

Description

A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omits the feature_views field, an attacker can bypass intended permission checks. This allows an unauthenticated remote attacker, or any authenticated user, to trigger a full re-materialization of all feature views. The consequence is a Denial of Service (DoS) due to data corruption and significant resource consumption across all tenants.

Affected products

Red Hat OpenShift AI 2.25: all versions — fixed in 1786110051
Red Hat OpenShift AI 3.3: all versions — fixed in 1786110033
Red Hat OpenShift AI 3.4: all versions — fixed in 1791863220

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 2.25 1786110051; Red Hat OpenShift AI 3.3 1786110033; Red Hat OpenShift AI 3.4 1791863220. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-18947 or the next vulnerability affects your stack