CVE-2026-18942

Name of the Vulnerable Software and Affected Versions Feast operator (affected versions not specified)

Description A flaw allows a malicious tenant to inject arbitrary code into their feature repository. This code is executed by an automated process with elevated privileges, enabling the tenant to steal sensitive credentials. This process can result in a direct escalation of privileges, granting the tenant administrative control over the Kubernetes cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.