{"uuid": "099ef8bd-d5b6-4594-9e83-7c3d5c907398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18948", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117074993140604740", "content": "CVE-2026-18948: CRITICAL in RHOAI Feast \u2014 unsafe UDF deserialization allows unauth RCE on feature-server. Auth attackers can bypass auth to run code on registry-server. Mitigate by enforcing `auth.type: kubernetes`. https://radar.offseq.com/threat/cve-2026-18948-vulnerability-in-red-hat-red-hat-openshift-ai-rhoai-ae1bc718efe1cce9 #OffSeq #RedHat #CVE #infosec", "creation_timestamp": "2026-08-11T04:30:25.572506Z"}