CVE-2026-55563 Security feature bypass in feast
Attackers can bypass CI approval checks to execute untrusted code with production cloud credentials in Feast's pull request integration tests.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-55563?
CVE-2026-55563 is a high-severity vulnerability in feast-dev feast, published on 21 Sep 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Feast is the open source feature store for AI and machine learning. Prior to 0.65.0, .github/workflows/pr_integration_tests.yml uses pull_request_target with the synchronize event and preserves ok-to-test, approved, or lgtm labels across newly pushed commits, allowing a fork contributor to obtain approval for a benign revision and then run changed code from refs/pull/${{ github.event.pull_request.number }}/merge through privileged make targets. The job exposes GCP, AWS, and Snowflake credentials to that code, enabling runner code execution, credential disclosure, and possible access to downstream cloud resources. An external label-removal integration could mitigate the condition, but no repository workflow provided that protection. This issue is fixed in version 0.65.0.
Weakness: CWE-863
Which versions are affected by CVE-2026-55563?
How do I fix CVE-2026-55563?
No fix has been published for CVE-2026-55563 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-55563 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-55563 exists.
Sources
Also known as GHSA-2j2x-r73g-hrr5.