Skip to content

Vendor

Feast vulnerabilities

2 published CVES affecting Feast, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of Feast alerts

Products

Latest Feast CVEs

Newest publication first

  1. CVE-2026-23538 Feast: resource exhaustion via websocket endpoint

    Published
    HighCVSS 7.5 EPSS 0.89%

    A vulnerability was identified in the Feast Feature Server's /ws/chat endpoint that allows remote attackers to establish persistent WebSocket connections without any authentication. By opening a large number of simultaneous connections, an attacker can exhaust server resources—su...

  2. CVE-2026-23537 Feast: unauthenticated arbitrary file write

    Published
    CriticalCVSS 9.1 EPSS 1.0%

    A vulnerability has been identified in the Feast Feature Server’s /save-document endpoint that allows an unauthenticated remote attacker to write arbitrary JSON files to the server's filesystem. Although the system attempts to restrict file locations, these protections can be byp...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.