CVE-2026-65820: aeon GitHub Actions workflow exposes tokens to fork pull requests

Summary

aeon, a scikit-learn compatible Python library for time series learning, has a flaw in a GitHub Actions workflow before version 1.5.0. The workflow used pull_request_target for pre-commit checks, so fork-controlled code could run in a privileged context with elevated credentials that could push commits to pull request branches. A malicious fork pull request could expose a token and create a repository write path.

Mitigation

Fixed in 1.5.0.

Related items

• MediumHackers stole AI credentials to get $740,000 in free compute; Railway picked up the billSimilar attack · CSO Online
• MediumRewriting less than 10 neurons in an LLM can turn it into a sleeper backdoorSimilar attack · CSO Online
• MediumDetecting sleeper agents hiding in AI model neuronsSimilar attack · Microsoft Security Blog
• InfoStealthyPoison: Manipulating LLM Agent Behavior through Procedural Poisoning of Third-Party SkillsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumTop MCP security resources — November 2026Similar attack · Adversa AI Blog