This vulnerability involves improper limitation of a pathname to a restricted directory (CWE-22) in the Feast Feature Server's /read-document endpoint within Red Hat OpenShift AI (RHOAI). An unauthenticated attacker can exploit this by crafting a specific HTTP POST request to bypass access controls and read any file the server process can access. The vulnerability is publicly disclosed with CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. The vendor advisory URL is provided but does not contain explicit patch or remediation details in the input data.

Successful exploitation allows an unauthenticated remote attacker to read arbitrary files on the server, potentially exposing sensitive system files, application configurations, and credentials. This compromises confidentiality but does not affect integrity or availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-23536 for current remediation guidance. Until an official fix is available, restrict network access to the Feast Feature Server and monitor for suspicious requests targeting the /read-document endpoint.