Skip to content
Threat Feed
Subscribe

Vendor

Feast

1 brief RSS
low advisory

Feast Feature Server Denial of Service via Unauthenticated WebSocket Connections (CVE-2026-23538)

A vulnerability (CVE-2026-23538) exists in the Feast Feature Server's /ws/chat endpoint, allowing remote attackers to establish numerous unauthenticated, persistent WebSocket connections. This exploit, a form of resource exhaustion (CWE-770), consumes server resources like memory, CPU, and file descriptors, leading to a complete denial of service for legitimate users. Affected versions are those prior to 0.59.0.

Feast Feature Server +1 denial-of-service vulnerability websocket resource-exhaustion feast-feature-server
1r 1t 1c