CVE-2026-18941 describes a vulnerability in Feast and feast-operator caused by the default "no_auth" configuration in both the Feast SDK and feast-operator, which results in no security manager being installed. This lack of authentication allows remote attackers to access feature-server, registry-server, and offline-server endpoints without authorization. Exploitation can lead to remote code execution by storing malicious user-defined functions on the feature-server, denial of service by triggering re-materialization of all tenant features, and unauthorized cross-tenant data access. The CVSS v3.1 base score is 7.7 (high), reflecting network attack vector, low attack complexity, required privileges, no user interaction, scope change, and high confidentiality impact. Red Hat advisories mention this CVE in the context of Red Hat OpenShift AI updates but do not list a specific fix yet, indicating patch status is not confirmed.

The vulnerability allows remote attackers to bypass authentication controls, leading to remote code execution, denial of service, and unauthorized access to sensitive data across tenants. This can compromise confidentiality and system integrity. The high CVSS score reflects the critical nature of these impacts. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Red Hat advisories related to OpenShift AI mention this CVE but do not provide a fix at this time. Users should follow official vendor documentation and upgrade instructions once patches become available. Until then, consider configuring authentication explicitly rather than relying on the default "no_auth" setting to reduce exposure.