CVE-2026-23536

Feast: unauthenticated arbitrary file read

A security issue was discovered in the Feast Feature Server's `/read-document` endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a specially crafted HTTP POST request, an attacker can bypass intended access restrictions to potentially retrieve sensitive system files, application configurations, and credentials.

Affected

Red Hat · Red Hat OpenShift AI (RHOAI)

CVSS v3.1 CNA

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

2.41% chance of exploitation in the next 30 days, 84th percentile

Nuclei

high · CWE-22

Published

2026-03-20

Updated

2026-07-15

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23536.yaml

References

• CVE Record
• NVD entry