Feast vulnerabilities
We track 2 vulnerabilities in Feast products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Feast vulnerabilities
- 7.5 High severity
Feast Feature Server: Allocation of Resources Without Limits or Throttling
A vulnerability was identified in the Feast Feature Server's `/ws/chat` endpoint that allows remote attackers to establish persistent WebSocket connections without any authentication. By opening a large number of simultaneous connections, an attacker can exhau
- 9.1 Critical severity
Feast Feature Server: Missing Authorization
A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an unauthenticated remote attacker to write arbitrary JSON files to the server's filesystem. Although the system attempts to restrict file locations, these