Description
A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with elevated privileges, allowing the tenant to steal sensitive credentials. This could lead to a direct escalation of privileges, granting the tenant administrative control over the Kubernetes cluster.
Published: 2026-08-10
Score: 5.5 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Feast operator has a flaw that permits a tenant to inject arbitrary code into the feature repository. The injected code is executed automatically by a cronjob running with elevated privileges, enabling the tenant to exfiltrate credentials. This can lead to direct administrative control over the cluster.

Affected Systems

The vulnerability affects Red Hat OpenShift AI deployments that incorporate the Feast operator. No specific version numbers are provided, so any installation of the RHOAI Feast operator remains at risk until patched.

Risk and Exploitability

The CVSS score is 5.5, indicating a moderate risk. EPSS is not available, and it is not listed in the CISA KEV catalog. The likely attack vector would involve a tenant with write access to the feature repository. By adding malicious code to the repository, the tenant triggers execution in a cronjob pod, which has broader cluster privileges. Successful exploitation would grant the malicious tenant administrative rights.

Generated by OpenCVE AI on August 10, 2026 at 22:42 UTC.

Remediation

Vendor Workaround

Configure the Feast operator to use a dedicated, minimally-privileged ServiceAccount for the `feast apply` CronJob, ensuring `automountServiceAccountToken: false` is set. Apply a restricted `securityContext` to the CronJob pod and implement network policies to limit egress to only required registry endpoints. Ensure the CronJob ServiceAccount is separate from the feature-server ServiceAccount.

OpenCVE Recommended Actions

  • Configure the Feast operator to run the feast apply cronjob with a dedicated, minimally-privileged ServiceAccount and disable automountServiceAccountToken.
  • Apply a restricted securityContext to the cronjob pod and enforce network policies that limit egress to essential registry endpoints.
  • Ensure the cronjob ServiceAccount is separate from the feature-server ServiceAccount and audit that tenant code cannot be written to the feature repository.
  • Monitor and audit cronjob executions for unexpected activity.

Generated by OpenCVE AI on August 10, 2026 at 22:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 11 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Mon, 10 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-269
CWE-94

Mon, 10 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with elevated privileges, allowing the tenant to steal sensitive credentials. This could lead to a direct escalation of privileges, granting the tenant administrative control over the Kubernetes cluster.
Title Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation
First Time appeared Redhat
Redhat openshift Ai
CPEs cpe:/a:redhat:openshift_ai
Vendors & Products Redhat
Redhat openshift Ai
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L'}

Subscriptions

Redhat Openshift Ai
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-08-10T20:44:46.202Z

Reserved: 2026-08-05T13:25:36.192Z

Link: CVE-2026-18942

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Important

Publid Date: 2026-08-10T18:52:00Z

Links: CVE-2026-18942 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T22:45:05Z

Weaknesses
  • CWE-269

    Improper Privilege Management

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')