# CVE-2026-23536: Feast Feature Server path traversal in /read-document endpoint

Source: https://junglewise.ai/threats/cve-2026-23536-feast-feature-server-path-traversal-in-read-document-endpoint  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-20. Updated: 2026-06-30  
License: CC BY 4.0 with a link back

CVE-2026-23536 · Severity: high · CVSS 7.5 · Published 2026-03-20

A security vulnerability has been identified in the Feast Feature Server, a tool used to manage and serve data for machine learning models. An unauthorized person could remotely access and read sensitive files on the server, such as system configurations and login credentials. This could lead to a full compromise of the server and the data it handles.

## Quick answers

**Is CVE-2026-23536 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-23536 being exploited in the wild.

**How severe is CVE-2026-23536?** High severity, with a CVSS score of 7.5, published 20 March 2026.

**Which products and versions are affected?** Feast Feast Feature Server <= 0.58.0; Red Hat OpenShift AI (RHOAI) Affected.

**Is there a fix for CVE-2026-23536?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-23536 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-23536?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability (CWE-22) exists in the Feast Feature Server's `/read-document` endpoint. The flaw allows an unauthenticated remote attacker to perform arbitrary file reads by submitting a specially crafted HTTP POST request. Successful exploitation enables the retrieval of any file accessible to the server process, including sensitive configuration files and credentials. The vulnerability affects Feast versions up to and including 0.58.0 and is also present in Red Hat OpenShift AI (RHOAI) components utilizing the feature server. Security engineers should verify if their deployments use the affected endpoint and apply updates from the vendor.

## Affected products

- Feast Feast Feature Server <= 0.58.0
- Red Hat OpenShift AI (RHOAI) Affected

## Timeline

- 2026-01-13: disclosed: Initial report in Red Hat Bugzilla
- 2026-03-20: advisory: NVD and Red Hat published advisory

## References

- [https://access.redhat.com/downloads/content/package-browser/](https://access.redhat.com/downloads/content/package-browser/)
- [https://access.redhat.com/security/cve/CVE-2026-23536](https://access.redhat.com/security/cve/CVE-2026-23536)
- [https://bugzilla.redhat.com/show_bug.cgi?id=2429302](https://bugzilla.redhat.com/show_bug.cgi?id=2429302)
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23536.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23536.json)