CVE-2026-56121 | feast-dev feast up to 0.62.x Feast Service dill.loads user_defined_function.body deserialization

June 24, 2026 Yanac

A vulnerability categorized as critical has been discovered in feast-dev feast up to 0.62.x. This affects the function dill.loads of the component Feast Service. Executing a manipulation of the argument user_defined_function.body can lead to deserialization.

This vulnerability is handled as CVE-2026-56121. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More