Skip to content

CVE-2026-23538

CVE.org · Published

Historical CVEs JSON AI instructions

Record status: Published
Identifier year (not publication year): 2026
Source publication: Jul 16, 2026
Source updated: Jul 16, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Feast: resource exhaustion via websocket endpoint

A vulnerability was identified in the Feast Feature Server's `/ws/chat` endpoint that allows remote attackers to establish persistent WebSocket connections without any authentication. By opening a large number of simultaneous connections, an attacker can exhaust server resources—such as memory, CPU, and file descriptors—leading to a complete denial of service for legitimate users.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Feast Feature Server

Vendor: Feast
Product: Feast Feature Server
Platforms: Unknown
Default status: unaffected

Feast Feature Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	0.59.0	Unavailable	None listed

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-feature-server-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat
Product: Red Hat OpenShift AI (RHOAI)
Platforms: Unknown
Default status: unaffected
Package: rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.