CVE-2026-23536: Red Hat Openshift Ai Rhoai

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

A security issue was discovered in the Feast Feature Server's `/read-document` endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a specially crafted HTTP POST request, an attacker can bypass intended access restrictions to potentially retrieve sensitive system files, application configurations, and credentials.

Affected products

• Red Hat Red Hat Openshift Ai Rhoai

Published 2026-03-20. Last modified 2026-07-15.