Read the docs
TI-2026-40500 Aliases CVE-2026-56121GHSA-q63x-9pfm-mjx4

Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

Priority HIGH 81CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 2 fixed, 1 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-502.

Summary

Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. The user_defined_function.body field of an OnDemandFeatureView spec is decoded from base64 and passed to dill.loads() before any authorization check is performed, enabling attackers to embed a malicious serialized Python object with an arbitrary __reduce__ method to execute OS commands as the feast service account.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01406 72nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Partial feast (feast-dev): 0.63.0feast (PyPI): 0.63.0Red Hat: 3 advisoriesRed Hat: 2 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
feast-devfeastbefore 0.63.00.63.0Patch availableCNA
—feast (PyPI)before 0.63.00.63.0Patch availableGHSA-q63x-9pfm-mjx4
  • feast Vendorfeast-dev Affected before 0.63.0 Fixed in 0.63.0 Patch available CNA
  • feast (PyPI) Vendor— Affected before 0.63.0 Fixed in 0.63.0 Patch available GHSA-q63x-9pfm-mjx4

Remediation

  • Fix · CNA feast (feast-dev) Fixed in 0.63.0
  • Fix · GHSA-q63x-9pfm-mjx4 feast (PyPI) Fixed in 0.63.0 Advisory →

Red Hat 3 advisories

  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:60520 Released 2026-08-27 · Red Hat rating Critical
    RHOAI 3.4.4 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift AI 2.25Fixed RHSA-2026:87410
Red Hat OpenShift AI 3.4Fixed RHSA-2026:60520, RHSA-2026:84734
Not affected: 2 products
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56121
  2. 2026-10-03 Alias added: GHSA-q63x-9pfm-mjx4
  3. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  4. 2026-10-20 Affected versions changed · Red Hat
  5. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  6. 2026-10-23 Fix available: Red Hat OpenShift AI 2.25 · Red Hat
  7. 2026-11-03 Fix available: PyPI/[email protected] · GHSA-q63x-9pfm-mjx4
  8. 2026-11-03 CVSS score added · GHSA-q63x-9pfm-mjx4
  9. 2026-11-03 Weakness changed · GHSA-q63x-9pfm-mjx4
  10. 2026-11-03 9 new references · GHSA-q63x-9pfm-mjx4

References

Exploit 1

Patch 1

Advisory 1

Other 6

  • TI-2026-62528 Feast through 0.66.0 Authentication Bypass via Unverified Token CVSS 4.0CRITICAL 9.3
  • TI-2026-40104 Incorrect authorization in feast-dev feast CVSS 4.0HIGH 8.9
  • TI-2025-10223 Arbitrary Code Execution in feast-dev/feast CVSS 3.0HIGH 7.8
  • TI-2024-10749 CORS Vulnerability in feast-dev/feast CVSS 3.0HIGH 7.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences