Feast Feature Server Unauthenticated Arbitrary File Read Vulnerability

A vulnerability exists in the Feast Feature Server's `/read-document` endpoint, allowing unauthenticated remote attackers to read any file accessible to the server process. By sending a specially crafted HTTP POST request, attackers can bypass access restrictions and potentially retrieve sensitive system files, application configurations, and credentials. This vulnerability affects Feast Feature Server versions through 0.58.0.

Impact

Exploitation of this vulnerability could lead to unauthorized reading of files, including sensitive data such as system files, application configurations, and credentials.