CVE-2026-23536
Published: 20 March 2026
Summary
CVE-2026-23536 is a high-severity Path Traversal (CWE-22) vulnerability. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 27.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-6 (Least Privilege) and SI-10 (Information Input Validation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly validates inputs to the /read-document endpoint to block path traversal payloads that bypass file access restrictions.
Remediates the specific path traversal flaw in the Feast Feature Server through timely patching as referenced in vendor advisories.
Enforces least privilege on the server process to restrict access to sensitive files, limiting damage from successful path traversal exploitation.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Path traversal in public-facing /read-document endpoint directly enables remote file read (T1190) and arbitrary local data access (T1005).
NVD Description
A security issue was discovered in the Feast Feature Server's `/read-document` endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a specially crafted HTTP POST request, an attacker can bypass intended…
more
access restrictions to potentially retrieve sensitive system files, application configurations, and credentials.
Deeper analysisAI
CVE-2026-23536 is a path traversal vulnerability (CWE-22) in the Feast Feature Server's `/read-document` endpoint. It affects the Feast Feature Server, allowing an unauthenticated remote attacker to read any file accessible to the server process. The issue, published on 2026-03-20, stems from the ability to send a specially crafted HTTP POST request that bypasses intended access restrictions, with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
An unauthenticated attacker with network access can exploit this vulnerability by crafting and sending a malicious HTTP POST request to the `/read-document` endpoint. Successful exploitation enables the retrieval of sensitive system files, application configurations, and credentials accessible to the server process, resulting in high confidentiality impact without requiring privileges, user interaction, or scope changes.
Red Hat security advisories provide details on this CVE, available at https://access.redhat.com/security/cve/CVE-2026-23536, along with the associated Bugzilla entry at https://bugzilla.redhat.com/show_bug.cgi?id=2429302, which likely include information on patches and mitigation steps.
Details
- CWE(s)