Skip to content
OpenAdvisories

Vendor

Feast

2 known vulnerabilities.

Products

Feast Feature Server 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-23537

    Feast: unauthenticated arbitrary file write

    A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an unauthenticated remote attacker to write arbitrary JSON files to the server's filesystem. Although the system attempts to restrict file locations, these…

    Red Hat Feast Red Hat OpenShift AI (RHOAI) Feast Feature Server