AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-23538

Red Hat Feast Feature Server: denial of service

Red Hat

CVE-2026-23538 · Published Jul 16, 2026

High7.5
Fix: upgrade to 0.59.0 or later
Red Hat advisory

A vulnerability was identified in the Feast Feature Server's /ws/chat endpoint that allows remote attackers to establish persistent WebSocket connections without any authentication. By opening a large number of simultaneous connections, an attacker can exhaust server resources—such as memory, CPU, and file descriptors—leading to a complete denial of service for legitimate users.

Affected versions

PackageAffectedFixed in
Feast Feature Server
Product
< 0.59.00.59.0
Red Hat OpenShift AI (RHOAI)
Product
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
Details and references

More Red Hat advisories

All Red Hat