CVE-2026-18947

A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omits the featureviews field, an attacker can bypass intended permission checks. This allows an unauthenticated remote...

CVE-2026-18947 Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omits the featureviews field, an attacker can bypass intended permission checks. This allows an unauthenticated remote...

CVE-2026-18947

A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omits the featureviews field, an attacker can bypass intended permission checks. This allows an unauthenticated remote...

CVE-2026-18947

Feast contains an authorization bypass in the /materialize and /materialize-incremental endpoints. A crafted request missing the feature_views field can bypass permission checks, allowing an unauthenticated or any authenticated user to trigger a full re-materialization of all feature views, leadi...

PT-2026-69963

Name of the Vulnerable Software and Affected Versions Feast affected versions not specified Description An authorization bypass exists in the '/materialize' and '/materialize-incremental' endpoints. By sending a specially crafted request that omits the feature views field, an unauthenticated remo...