CVE-2026-23536 Feast: unauthenticated arbitrary file read
Unauthenticated attackers can read arbitrary files via the Feast Feature Server endpoint, exposing sensitive system data and credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-23536?
CVE-2026-23536 is a high-severity path traversal vulnerability in Red Hat OpenShift AI (RHOAI), published on 20 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A security issue was discovered in the Feast Feature Server's `/read-document` endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a specially crafted HTTP POST request, an attacker can bypass intended access restrictions to potentially retrieve sensitive system files, application configurations, and credentials.
Weakness: CWE-22
Which versions are affected by CVE-2026-23536?
How do I fix CVE-2026-23536?
No fix has been published for CVE-2026-23536 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-23536 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-23536 exists.
Public exploit code: 1 Nuclei template.
Sources
Also known as GHSA-9p47-cwvm-h4hj.