CVE-2026-23536: Feast: unauthenticated arbitrary file read

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-03-20 · updated 2026-07-15
Weakness: CWE-22

Description

A security issue was discovered in the Feast Feature Server's `/read-document` endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a specially crafted HTTP POST request, an attacker can bypass intended access restrictions to potentially retrieve sensitive system files, application configurations, and credentials.

Affected products

Red Hat OpenShift AI (RHOAI): all versions

References

https://access.redhat.com/security/cve/CVE-2026-23536
https://bugzilla.redhat.com/show_bug.cgi?id=2429302
https://access.redhat.com/security/cve/CVE-2026-23536
https://bugzilla.redhat.com/show_bug.cgi?id=2429302
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23536.json

Get alerted when CVE-2026-23536 or the next vulnerability affects your stack