VulnSocial

CVE-2026-56121Patch

MEDIUMCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. The user_defined_function.body field of an OnDemandFeatureView spec is decoded from base64 and passed to dill.loads() before any authorization check is performed, enabling attackers to embed a malicious serialized Python object with an arbitrary __reduce__ method to execute OS commands as the feast service account.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-502

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-06-24); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-24: 2Mentions · 2026-08-12: 1PoC Mentioned / Linked · 2026-08-12: 1Exploit Tool / Code · 2026-06-24: 1Patch / Workaround · 2026-06-24: 2Patch / Workaround · 2026-08-12: 1Technical Details · 2026-06-24: 2Technical Details · 2026-08-12: 106-2408-12
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-06-242
Disclosure1Patch1
2026-08-121
Patch1
Full discourse3 posts
  • transilienceai@transilienceai
    Patch

    🚨 CVE-2026-56121 | CVSS 9.8 Critical pre-auth RCE affecting Feast in Red Hat OpenShift AI. → Unsafe dill.loads() deserialization before authorization → gRPC ApplyFeatureView / TCP 6570 → No privileges required → Public PoC available → Feast < 0.63.0 affected Action: Upgrade to Feast ≥ 0.63.0 and restrict registry gRPC access to trusted networks. Full Advisory: https://app.transilience.cloud/run-history/da358980-b594-4ddb-91f1-189c78ddd950?file=reports%2Fproducts%2FRed_Hat_OpenShift_AI_Feast_Unsafe_Deserialization_RCE__CVE-2026-18948__red_hat_openshift_ai_feast_unsafe_deserialization_rce__cve-2026-18948__report.pdf #CVE #CyberSecurity #OpenShift

    Post summary

    A critical pre‑authentication remote code execution flaw (CVE‑2026‑56121) in Feast on Red Hat OpenShift AI allows attackers to execute arbitrary code via unsafe dill.loads deserialization on the gRPC ApplyFeatureView endpoint. A public PoC exists; the advisory recommends upgrading to Feast 0.63.0 or newer and restricting gRPC access to trusted networks.

    01021104
    330 followersView on X
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-56121 — CVSS 9.8/10 ██████████ Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/ymFaVNhl8N

    Post summary

    The tweet announces a critical unsafe deserialization vulnerability (CVE‑2026‑56121) in Feast 0.63.0 with a CVSS of 9.8/10 and urges users to apply the available patch.

    10000124
    59 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨 Critical - Unauthenticated RCE in Feast via Unsafe Deserialization (CVE-2026-56121) Feast's registry server deserializes the user_defined_function.body field from incoming gRPC requests by base64-decoding it and passing it directly to dill.loads()- before any authorization check is performed. An attacker can embed a malicious serialized Python object with a custom __reduce__ method to execute arbitrary OS commands as the Feast service account. This requires no authentication and no user interaction, making it trivially exploitable against any publicly accessible Feast registry server. Full RCE with complete confidentiality, integrity, and availability impact (CVSS 9.8). 👉Upgrade to Feast 0.63.0 or newer .

    Post summary

    Feast’s registry server is vulnerable to unauthenticated remote code execution through unsafe deserialization, allowing attackers to run arbitrary OS commands without authentication. A patch is available in Feast 0.63.0 and higher.

    0000092
    226 followersView on X

Explore more

Back to dashboard