A vulnerability in the Feast operator allows a malicious tenant to inject arbitrary code into their feature repository. This code is executed by an automated process with elevated privileges, enabling the tenant to steal sensitive credentials and escalate privileges to gain administrative control over the Kubernetes cluster.