REDHAT-BUG-2429311: High severity Feast Feast Feature Server vulnerability

Q: Which deployments should be prioritized for triage?

Feast Feature Server deployments running version 0.58.0 or earlier should be prioritized, particularly where remote attackers can reach the server's WebSocket endpoint.

Q: What does an attacker need to exploit this issue?

An attacker needs network access to the unauthenticated WebSocket endpoint. The endpoint permits persistent connections without authentication.

Q: How can teams assess whether they may be affected?

Check the deployed Feast Feature Server version; versions 0.58.0 and earlier are affected. Also review whether the WebSocket endpoint is reachable by untrusted remote clients and monitor for unexpected persistent connections.

Published Jan 13, 2026

Updated

Unauthenticated WebSocket endpoint in Feast Feature Server allows remote attackers to establish persistent connections without authentication, enabling resource exhaustion and potential information disclosure. Version affected: <= 0.58.0.

Affected Software

1 affected component

Feast Feast Feature Server<=0.58.0

Event History

Jan 13, 2026

Data Sourced

via Red Hat·07:48 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments should be prioritized for triage?

Feast Feature Server deployments running version 0.58.0 or earlier should be prioritized, particularly where remote attackers can reach the server's WebSocket endpoint.

What does an attacker need to exploit this issue?

An attacker needs network access to the unauthenticated WebSocket endpoint. The endpoint permits persistent connections without authentication.

How can teams assess whether they may be affected?

Check the deployed Feast Feature Server version; versions 0.58.0 and earlier are affected. Also review whether the WebSocket endpoint is reachable by untrusted remote clients and monitor for unexpected persistent connections.

REDHAT-BUG-2429311: High severity Feast Feast Feature Server vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments should be prioritized for triage?

What does an attacker need to exploit this issue?

How can teams assess whether they may be affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for triage?

What does an attacker need to exploit this issue?

How can teams assess whether they may be affected?