Executive brief
Feast Feature Server, a tool used to manage and serve data for machine learning models, contains a critical security flaw in its document saving feature. An unauthenticated attacker can remotely write or overwrite files on the server, potentially bypassing security restrictions to modify system configurations or startup scripts. This could allow an attacker to take control of the server, disrupt operations, or cause a total system compromise.
Technical details
A missing authorization vulnerability (CWE-862) exists in the Feast Feature Server's `/save-document` endpoint. The application fails to properly validate or restrict file write operations, allowing unauthenticated remote attackers to write arbitrary JSON files to the server's filesystem. While the system attempts to implement path restrictions, these can be bypassed to overwrite critical application configurations or startup scripts. This vulnerability can lead to unauthorized system modifications, denial of service via disk exhaustion, or remote code execution. The issue is addressed in version 0.59.0.
Affected products
- Feast Feast Feature Server < 0.59.0
- Red Hat Red Hat OpenShift AI (RHOAI) Affected
Timeline
- 2026-01-13: disclosed: Initial report in Red Hat Bugzilla
- 2026-01-16: patched: Fix merged in GitHub pull request #192
- 2026-07-01: advisory: NVD publication date