CVE-2026-18941— Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication
Quick assessment
Affected
Red Hat Red Hat OpenShift AI 2.25
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Red Hat OpenShift AI是美国Red Hat公司的一款混合云人工智能平台，为数据科学家和开发者提供跨混合云环境构建、开发、训练、部署、服务和监控机器学习（ML）模型及 AI 应用的全生命周期工具。 Red Hat OpenShift AI存在授权问题漏洞，该漏洞源于默认配置为“no_auth”，未安装安全管理器，可能导致未经身份验证的远程攻击者访问feature-server、registry-server和offline-server端点，通过存储恶意用户自定义函数实现远程代码执行，强制
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 16
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat OpenShift AI (RHOAI) | any |
unaffected |
any |
unaffected | ||
any |
unaffected | ||
any |
unaffected | ||
any |
unaffected | ||
any |
unaffected | ||
any |
unaffected | ||
any |
unaffected | ||
| … +5 more rows | |||
| Red Hat | Red Hat OpenShift AI 2.25 | 1786110051< * |
unaffected |
| Red Hat | Red Hat OpenShift AI 3.3 | 1786110033< * |
unaffected |
| Red Hat | Red Hat OpenShift AI 3.4 | 1786107278< * |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-18941
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This default allows unauthenticated and unauthorized access to feature-server, registry-server, and offline-server endpoints. A remote attacker, by exploiting this missing authentication, could achieve remote code execution (RCE) by storing a malicious User-Defined Function (UDF) on the feature-server, trigger a denial of service (DoS) by forcing re-materialization of all tenant features, and gain unauthorized access to cross-tenant data.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat OpenShift AI 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat OpenShift AI是美国Red Hat公司的一款混合云人工智能平台，为数据科学家和开发者提供跨混合云环境构建、开发、训练、部署、服务和监控机器学习（ML）模型及 AI 应用的全生命周期工具。 Red Hat OpenShift AI存在授权问题漏洞，该漏洞源于默认配置为“no_auth”，未安装安全管理器，可能导致未经身份验证的远程攻击者访问feature-server、registry-server和offline-server端点，通过存储恶意用户自定义函数实现远程代码执行，强制
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat OpenShift AI 2.25 | 1786110051 ~ * |
cpe:/a:redhat:openshift_ai:2.25::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.3 | 1786110033 ~ * |
cpe:/a:redhat:openshift_ai:3.3::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.4 | 1786107278 ~ * |
cpe:/a:redhat:openshift_ai:3.4::el9
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
II. Public POCs for CVE-2026-18941
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18941
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-18941 (5)
-
-
-
-
🔗 RHSA-2026:53261 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
Same Patch Batch · Red Hat · 2026-08-10 · 28 CVEs total
| CVE-2026-18948 | 9.9 CRITICAL | Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server |
| CVE-2026-14450 | 9.9 CRITICAL | Maas-billing: maas api: privilege escalation via forged http headers due to missing authen |
| CVE-2026-18950 | 8.8 HIGH | Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref i |
| CVE-2026-18949 | 8.8 HIGH | Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac man |
| CVE-2026-18951 | 8.8 HIGH | Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainj |
| CVE-2026-18617 | 8.8 HIGH | Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams |
| CVE-2026-18982 | 8.8 HIGH | Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/ad |
| CVE-2026-18608 | 8.7 HIGH | Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.o |
| CVE-2026-71576 | 8.5 HIGH | Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source( |
| CVE-2026-18947 | 8.5 HIGH | Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized |
| CVE-2026-15467 | 8.1 HIGH | Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass |
| CVE-2026-15581 | 8.0 HIGH | Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-r |
| CVE-2026-63622 | 7.8 HIGH | Libvirt: swtpm privilege escalation via symlink following |
| CVE-2026-18621 | 7.6 HIGH | Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypass |
| CVE-2026-19387 | 7.6 HIGH | Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec im |
| CVE-2026-18611 | 7.5 HIGH | Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand |
| CVE-2026-18618 | 7.5 HIGH | Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable |
| CVE-2026-19389 | 7.1 HIGH | Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux |
| CVE-2026-18620 | 7.1 HIGH | Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authoriza |
| CVE-2026-19278 | 6.8 MEDIUM | Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m ro |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Red Hat OpenShift AI 2.25
-
CVE-2026-18620
Data-sciences-pipeline: user-controlled serviceaccount for w -
CVE-2026-18618
Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 -
CVE-2026-18611
Data-science-pipelines-operator: dspo: cryptographically wea -
CVE-2026-18982
Odh-training-operator-rhel9: rhoai fork aggregates training -
CVE-2026-18950
Odh-dashboard: odh-dashboard: confused-deputy privilege esca
Same vendor: Red Hat
-
CVE-2026-103399
Libsoup: soupserver: http/1 request smuggling via undrained -
CVE-2026-101295
Oc-mirror: oc-mirror: path traversal / arbitrary file write -
CVE-2026-103242
Rpm: heap-based buffer overflow write in hex2binv() via a mi -
CVE-2026-62146
Cri-o: cri-o: sandbox state poisoning via pod annotations ma -
CVE-2026-102560
Libsoup: libsoup: heap buffer overflow during outgoing perme
Same weakness: CWE-306
-
CVE-2026-102110
Missing authentication on a Kiteworks appliance setup functi -
CVE-2026-102124
Kiteworks Core Missing Authentication for Critical Function -
CVE-2026-102143
Kiteworks Email Protection Gateway Unrestricted Upload of Fi -
CVE-2026-102144
Kiteworks Email Protection Gateway Uncontrolled Resource Con -
CVE-2026-102150
Kiteworks Secure Data Forms Missing Authentication for Criti
V. Comments for CVE-2026-18941
No comments yet