Critical

Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

Type: advisorySource: Official CVE List1 source record

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in default configurations. An authenticated attacker can also achieve arbitrary code execution on the registry server by bypassing authorization checks during deserialization. This vulnerability can result in cross-tenant data access and lateral movement within the system.

Announced 10 Aug 2026Group revision 1

Original source ↗

CVE-2026-18948

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-18948

Red Hat OpenShift AI 2.25

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI 3.3

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI 3.4

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI 3.4

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/15/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift AI (RHOAI)

Source reference: /containers/cna/affected/16/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai:2.25::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 2.25",
    "versions": [
      {
        "status": "unaffected",
        "version": "1786110051",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhoai/odh-feature-server-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai:3.3::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 3.3",
    "versions": [
      {
        "status": "unaffected",
        "version": "1786110033",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhoai/odh-feature-server-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai:3.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 3.4",
    "versions": [
      {
        "status": "unaffected",
        "version": "1786107278",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhoai/odh-feature-server-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai:3.4::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 3.4",
    "versions": [
      {
        "status": "unaffected",
        "version": "1787068065",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhoai/odh-feature-server-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  }
]

Related CVEs: CVE-2026-18948
Source reference: /cveMetadata/cveId

Publisher severity

critical

Source reference: /containers/cna/metrics

Event: #2499 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:45 GMT
Publisher date: Mon, 10 Aug 2026 20:44:56 GMT

Read the original announcement

Revision history

24 Oct 2026CVE-2026-18948 · Revision 1Source updated