Medium severity · published Aug 10, 2026
CVE-2026-18942
Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation
5.5
CVSS
0.4%
EPSS
No
On KEV
Description
A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with elevated privileges, allowing the tenant to steal sensitive credentials. This could lead to a direct escalation of privileges, granting the tenant administrative control over the Kubernetes cluster.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L
Attack vector
Network
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat OpenShift AI 2.25 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift AI 3.4 · Red Hat
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-18942
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-18942
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:53261
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:53262
access.redhat.com
https://access.redhat.com/security/cve/CVE-2026-18942
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2511118
More from Red Hat OpenShift AI 2.25
8.8
CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test endpoints
10.0
CVE-2026-47691
Netty has Insufficient Bailiwick Validation for NS Records
10.0
CVE-2026-45674
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
10.0
CVE-2026-42043
Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
9.9
CVE-2026-18948
Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server