Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2026-18948

Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in default configurations. An authenticated attacker can also achieve arbitrary code execution on the registry server by bypassing authorization checks during deserialization. This vulnerability can result in cross-tenant data access and lateral movement within the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat OpenShift AI 2.25

Default version status: affected

  • 1786110051 to < *unaffected

Red Hat Red Hat OpenShift AI 3.3

Default version status: affected

  • 1786110033 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1786107278 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1787068065 to < *unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

References