A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the… (CVE-2026-18948)
A critical deserialization vulnerability (CVE-2026-18948) exists in Feast, where user-defined functions (UDFs) stored in its registry are improperly deserialized using the 'dill' library. This flaw allows unauthenticated remote attackers to execute arbitrary code on the feature server under default configurations. Authenticated attackers can also bypass authorization checks to achieve arbitrary code execution on the registry server. The vulnerability can lead to cross-tenant data access and lateral movement within the affected system.
AI Analysis
Technical Summary
CVE-2026-18948 is a critical vulnerability in Feast involving improper deserialization of user-defined functions (UDFs) serialized with the 'dill' library. This flaw permits remote unauthenticated attackers to store malicious UDFs, resulting in arbitrary code execution on the feature server by default. Additionally, authenticated attackers can bypass authorization during deserialization to execute arbitrary code on the registry server. The vulnerability enables cross-tenant data access and lateral movement within the system. It is associated with CWE-502 (Deserialization of Untrusted Data). The CVSS v3.1 score is 9.9, reflecting its critical impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation allows unauthenticated remote attackers to execute arbitrary code on the feature server, potentially compromising the entire system. Authenticated attackers can also exploit the flaw to execute arbitrary code on the registry server by bypassing authorization checks. This can lead to unauthorized cross-tenant data access and lateral movement within the environment, severely impacting confidentiality, integrity, and availability.
Mitigation Recommendations
The vendor advisory from Red Hat indicates updated images for Red Hat OpenShift AI that address this vulnerability. Users should upgrade to the fixed versions of Red Hat OpenShift AI as documented in the official Red Hat guidance (https://docs.redhat.com/en/documentation/red_hat_openshift_ai/). Follow the vendor's instructions to fully apply the errata update and upgrade your cluster accordingly. Patch status is confirmed as fixed in updated Red Hat OpenShift AI images. No additional generic mitigations are specified by the vendor.
A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the… (CVE-2026-18948)
Description
A critical deserialization vulnerability (CVE-2026-18948) exists in Feast, where user-defined functions (UDFs) stored in its registry are improperly deserialized using the 'dill' library. This flaw allows unauthenticated remote attackers to execute arbitrary code on the feature server under default configurations. Authenticated attackers can also bypass authorization checks to achieve arbitrary code execution on the registry server. The vulnerability can lead to cross-tenant data access and lateral movement within the affected system.
CVSS v3.1
Score 9.9critical
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-18948 is a critical vulnerability in Feast involving improper deserialization of user-defined functions (UDFs) serialized with the 'dill' library. This flaw permits remote unauthenticated attackers to store malicious UDFs, resulting in arbitrary code execution on the feature server by default. Additionally, authenticated attackers can bypass authorization during deserialization to execute arbitrary code on the registry server. The vulnerability enables cross-tenant data access and lateral movement within the system. It is associated with CWE-502 (Deserialization of Untrusted Data). The CVSS v3.1 score is 9.9, reflecting its critical impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation allows unauthenticated remote attackers to execute arbitrary code on the feature server, potentially compromising the entire system. Authenticated attackers can also exploit the flaw to execute arbitrary code on the registry server by bypassing authorization checks. This can lead to unauthorized cross-tenant data access and lateral movement within the environment, severely impacting confidentiality, integrity, and availability.
Mitigation Recommendations
The vendor advisory from Red Hat indicates updated images for Red Hat OpenShift AI that address this vulnerability. Users should upgrade to the fixed versions of Red Hat OpenShift AI as documented in the official Red Hat guidance (https://docs.redhat.com/en/documentation/red_hat_openshift_ai/). Follow the vendor's instructions to fully apply the errata update and upgrade your cluster accordingly. Patch status is confirmed as fixed in updated Red Hat OpenShift AI images. No additional generic mitigations are specified by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gg2p-37pv-v7fq
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-18948"]
- Ecosystems
- []
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
Patch Information
Threat ID: 6a7c9b73bf8831d539ce09f1
Added to database: 08/12/2026, 16:12:35 UTC
Last enriched: 08/12/2026, 17:31:48 UTC
Last updated: 08/12/2026, 17:40:59 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.