Feast Feature Server vulnerabilities

2 known vulnerabilities in Feast Feature Server from Feast. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Feast Feature Server: Allocation of Resources Without Limits or Throttling

  CVE-2026-23538Jul 16, 2026Feast

  A vulnerability was identified in the Feast Feature Server's `/ws/chat` endpoint that allows remote attackers to establish persistent WebSocket connections without any authentication. By opening a large number of simultaneous connections, an attacker can exhau

• 9.1 Critical severity

  Feast Feature Server: Missing Authorization

  CVE-2026-23537Jul 1, 2026FeastEPSS 1.05%

  A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an unauthenticated remote attacker to write arbitrary JSON files to the server's filesystem. Although the system attempts to restrict file locations, these