by Kastro CVE-2026-18948
Red Hat Red Hat OpenShift AI 2.25 — Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server
Description · from the CVE record
A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in default configurations. An authenticated attacker can also achieve arbitrary code execution on the registry server by bypassing authorization checks during deserialization. This vulnerability can result in cross-tenant data access and lateral movement within the system.
Affected
ProductAffectedFixed inSource
Red Hat OpenShift AI 2.25see advisory1786110051CNA
Red Hat OpenShift AI 3.3see advisory1786110033CNA
Red Hat OpenShift AI 3.4see advisory1786107278CNA
Red Hat OpenShift AI 3.4see advisory1787068065CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Scores by source
redhat (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total