An unauthenticated path traversal vulnerability in the Feast Feature Server poses a high risk of sensitive data exposure, including credentials and system configurations.

This is a path traversal vulnerability (CWE-22) residing in the /read-document endpoint. An unauthenticated attacker can execute a specially crafted HTTP POST request to bypass access restrictions and read sensitive files from the underlying server filesystem.

The ability for an unauthenticated attacker to read arbitrary system files represents a significant security breach. Successful exploitation could lead to the exposure of application configurations, environment secrets, and administrative credentials, potentially resulting in full system compromise. With a CVSS score of 7.5, this vulnerability is classified as High severity due to its ease of exploitation and potential for extensive data exfiltration.

Immediate Action: Monitor official Red Hat and Feast security advisories for the release of a patched version and apply the update immediately upon availability.

Proactive Monitoring: Review web server access logs for anomalous HTTP POST requests directed at the /read-document endpoint, particularly those containing directory traversal sequences such as dot-dot-slash.

Compensating Controls: Implement strict network ingress filtering and deploy a Web Application Firewall (WAF) to inspect and block incoming requests containing path traversal patterns targeting this specific endpoint.

Public Exploit Available: No (Exploit_available: unknown)

This vulnerability presents a clear risk to data confidentiality and should be prioritized for remediation as soon as the vendor provides a patch. Organizations utilizing Feast or Red Hat OpenShift AI should audit their exposure to the /read-document endpoint and ensure that compensating controls are in place to detect or block unauthorized access attempts.