Read the docs

Feast

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Feast records in CISA KEV

No Feast vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-18961 CVE-2026-23537 · GHSA-4m9c-5f58-453x

Feast: unauthenticated arbitrary file write

Priority MEDIUM 47

A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an unauthenticated remote attacker to write arbitrary JSON files to the server's filesystem.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01049 Published 2026-07-01 Fixed in 0.59.0 CWE-862
TI-2026-18962 CVE-2026-23538 · GHSA-gmv6-fcfc-3372

Feast: resource exhaustion via websocket endpoint

Priority MEDIUM 41

A vulnerability was identified in the Feast Feature Server's `/ws/chat` endpoint that allows remote attackers to establish persistent WebSocket connections without any authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00894 Published 2026-07-16 Fixed in 0.59.0 CWE-770
Open these records in search →