{"id":"CVE-2025-53547","title":"helm.sh/helm/v3: Helm Chart Code Execution (CVE-2025-53547)","summary":"A command injection vulnerability has been identified in Helm, a package manager for Kubernetes. An attacker can craft a malicious Chart.yaml file with specially linked dependencies in a Chart.lock file. If the Chart.lock file is a symboli…","severity":"high","cvss":8.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H","cvssSource":"vendor","cwe":"CWE-94","vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9","affected":["deployment_validation_operator","migration_toolkit_for_applications 7","multicluster_engine_for_kubernetes","advanced_cluster_management_for_kubernetes 2","openshift_container_platform 4","openshift_gitops","trusted_application_pipeline","advanced_cluster_management_for_kubernetes_2_12_for_rhel 9","advanced_cluster_management_for_kubernetes_2_13_for_rhel 9","multicluster_engine_for_kubernetes_2_7_for_rhel 9","advanced_cluster_management_for_kubernetes 2.12","advanced_cluster_management_for_kubernetes 2.13","advanced_cluster_management_for_kubernetes 2.14","advanced_cluster_management_for_kubernetes 2.15","migration_toolkit_for_applications 8.2","openshift_container_platform 4.12","openshift_container_platform 4.13","openshift_container_platform 4.14","openshift_container_platform 4.15","openshift_container_platform 4.16","openshift_container_platform 4.17","openshift_container_platform 4.18","openshift_container_platform 4.19","openshift_container_platform 4.20"],"patched":["advanced_cluster_management_for_kubernetes_2_12_for_rhel 9","advanced_cluster_management_for_kubernetes_2_13_for_rhel 9","multicluster_engine_for_kubernetes_2_7_for_rhel 9","advanced_cluster_management_for_kubernetes 2.12","advanced_cluster_management_for_kubernetes 2.13","advanced_cluster_management_for_kubernetes 2.14","advanced_cluster_management_for_kubernetes 2.15","migration_toolkit_for_applications 8.2","openshift_container_platform 4.12","openshift_container_platform 4.13","openshift_container_platform 4.14","openshift_container_platform 4.15","openshift_container_platform 4.16","openshift_container_platform 4.17","openshift_container_platform 4.18","openshift_container_platform 4.19","openshift_container_platform 4.20"],"published":"2025-07-08","updated":"2026-09-21","sourceUpdated":"2026-09-21T11:22:49+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-53547.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-53547.json"},{"url":"https://access.redhat.com/security/cve/CVE-2025-53547"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2378905"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-53547"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53547"},{"url":"https://github.com/helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571"},{"url":"https://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm"},{"url":"https://access.redhat.com/errata/RHSA-2025:18744"},{"url":"https://access.redhat.com/errata/RHSA-2025:16113"},{"url":"https://access.redhat.com/errata/RHSA-2025:18278"},{"url":"https://access.redhat.com/errata/RHSA-2025:19961"},{"url":"https://access.redhat.com/errata/RHSA-2026:67540"},{"url":"https://access.redhat.com/errata/RHSA-2025:19335"},{"url":"https://access.redhat.com/errata/RHSA-2026:2572"},{"url":"https://access.redhat.com/errata/RHSA-2026:67541"},{"url":"https://access.redhat.com/errata/RHSA-2026:56347"},{"url":"https://access.redhat.com/errata/RHSA-2025:17672"},{"url":"https://access.redhat.com/errata/RHSA-2025:18242"},{"url":"https://access.redhat.com/errata/RHSA-2025:16166"},{"url":"https://access.redhat.com/errata/RHSA-2025:16526"},{"url":"https://access.redhat.com/errata/RHSA-2025:16161"},{"url":"https://access.redhat.com/errata/RHSA-2025:15681"},{"url":"https://access.redhat.com/errata/RHSA-2025:16527"},{"url":"https://access.redhat.com/errata/RHSA-2025:15345"},{"url":"https://access.redhat.com/errata/RHSA-2025:16529"},{"url":"https://access.redhat.com/errata/RHSA-2025:14821"},{"url":"https://access.redhat.com/errata/RHSA-2025:16530"},{"url":"https://access.redhat.com/errata/RHSA-2025:16535"},{"url":"https://access.redhat.com/errata/RHSA-2025:9562"},{"url":"https://github.com/helm/helm"},{"url":"https://news.ycombinator.com/item?id=44506696"}],"tags":["csaf","vex","red-hat","exploit-available","osv","go"],"epss":0.00378,"epssPercentile":0.31737,"exploits":{"github":1,"githubRepos":["https://github.com/DVKunion/CVE-2025-53547-POC"],"checkedAt":"2026-09-23T07:13:36.748Z"},"exploitAvailable":true,"aliases":["GHSA-557j-xg8c-q2mm","BIT-helm-2025-53547","GO-2025-3802"],"ecosystem":"go","ingestedAt":"2026-09-12T03:13:01.754Z","slug":"CVE-2025-53547","body":"## Overview\n\nA command injection vulnerability has been identified in Helm, a package manager for Kubernetes. An attacker can craft a malicious Chart.yaml file with specially linked dependencies in a Chart.lock file. If the Chart.lock file is a symbolic link to an executable file, such as a shell script, and a user attempts to update the dependencies, the crafted content is written to the symlinked file and executed. This can lead to local code execution on the system. This issue has been patched in Helm version 3.18.4, and users should update to this version to mitigate the risk.\n\n## Vendor advisories\n\n- **RHSA-2025:18744** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 · released 2025-10-21 · [advisory](https://access.redhat.com/errata/RHSA-2025:18744)\n- **RHSA-2025:16113** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 · released 2025-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2025:16113)\n- **RHSA-2025:18278** · Red Hat · fixed in: multicluster engine for Kubernetes 2.7 for RHEL 9 · released 2025-10-21 · [advisory](https://access.redhat.com/errata/RHSA-2025:18278)\n- **RHSA-2025:19961** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.12 · released 2025-11-10 · [advisory](https://access.redhat.com/errata/RHSA-2025:19961)\n- **RHSA-2026:67540** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.13 · released 2026-09-15 · [advisory](https://access.redhat.com/errata/RHSA-2026:67540)\n- **RHSA-2025:19335** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.14 · released 2025-10-30 · [advisory](https://access.redhat.com/errata/RHSA-2025:19335)\n- **RHSA-2026:2572** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.14 · released 2026-02-11 · [advisory](https://access.redhat.com/errata/RHSA-2026:2572)\n- **RHSA-2026:67541** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.15 · released 2026-09-15 · [advisory](https://access.redhat.com/errata/RHSA-2026:67541)\n- **RHSA-2026:56347** · Red Hat · fixed in: Red Hat Migration Toolkit for Applications 8.2 · released 2026-08-18 · [advisory](https://access.redhat.com/errata/RHSA-2026:56347)\n- **RHSA-2025:17672** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.12 · released 2025-10-16 · [advisory](https://access.redhat.com/errata/RHSA-2025:17672)\n- **RHSA-2025:18242** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.13 · released 2025-10-23 · [advisory](https://access.redhat.com/errata/RHSA-2025:18242)\n- **Red Hat VEX** · Important · affected: Deployment Validation Operator, Migration Toolkit for Applications 7, Multicluster Engine for Kubernetes, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat OpenShift Container Platform 4, Red Hat OpenShift GitOps, … · no fix planned: Multicluster Engine for Kubernetes, Red Hat OpenShift Container Platform 4, Red Hat OpenShift GitOps, Red Hat Trusted Application Pipeline, … · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-53547.json)\n\n**helm.sh/helm/v3: Helm Chart Code Execution** — rated Important by Red Hat. Released 2025-07-08, updated 2026-09-21.\n\nAffected:\n\n- Deployment Validation Operator\n- Migration Toolkit for Applications 7\n- Multicluster Engine for Kubernetes\n- Red Hat Advanced Cluster Management for Kubernetes 2\n- Red Hat OpenShift Container Platform 4\n- Red Hat OpenShift GitOps\n- Red Hat Trusted Application Pipeline\n\nFixed:\n\n- Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9\n- Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9\n- multicluster engine for Kubernetes 2.7 for RHEL 9\n- Red Hat Advanced Cluster Management for Kubernetes 2.12\n- Red Hat Advanced Cluster Management for Kubernetes 2.13\n- Red Hat Advanced Cluster Management for Kubernetes 2.14\n- Red Hat Advanced Cluster Management for Kubernetes 2.15\n- Red Hat Migration Toolkit for Applications 8.2\n- Red Hat OpenShift Container Platform 4.12\n- Red Hat OpenShift Container Platform 4.13\n- Red Hat OpenShift Container Platform 4.14\n- Red Hat OpenShift Container Platform 4.15\n- Red Hat OpenShift Container Platform 4.16\n- Red Hat OpenShift Container Platform 4.17\n- Red Hat OpenShift Container Platform 4.18\n- Red Hat OpenShift Container Platform 4.19\n- Red Hat OpenShift Container Platform 4.20\n\nNo fix planned:\n\n- Multicluster Engine for Kubernetes\n- Red Hat OpenShift Container Platform 4\n- Red Hat OpenShift GitOps\n- Red Hat Trusted Application Pipeline\n- Deployment Validation Operator\n- Migration Toolkit for Applications 7\n- Red Hat Advanced Cluster Management for Kubernetes 2\n\nNot affected:\n\n- Red Hat Advanced Cluster Management for Kubernetes 2.12\n- Red Hat Advanced Cluster Management for Kubernetes 2.13\n- Red Hat Advanced Cluster Management for Kubernetes 2.14\n- Red Hat Advanced Cluster Management for Kubernetes 2.15\n- Red Hat Migration Toolkit for Applications 8.2\n- Red Hat OpenShift Container Platform 4.12\n- Red Hat OpenShift Container Platform 4.13\n- Red Hat OpenShift Container Platform 4.14\n- Red Hat OpenShift Container Platform 4.15\n- Red Hat OpenShift Container Platform 4.16\n\n## Remediation\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\nhttps://access.redhat.com/security/updates/classification/#important https://access.redhat.com/errata/RHSA-2025:18744\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro\n\nhttps://access.redhat.com/security/updates/classification/#important https://access.redhat.com/errata/RHSA-2025:16113\nFor multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/clusters/cluster_mce_overview#mce-install-intro https://access.redhat.com/errata/RHSA-2025:18278\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\n## Package advisory (CVE-2025-53547)\n\nAffected packages:\n\n- `helm.sh/helm/v3 >= 3.18.0-rc.1, < 3.18.4`\n- `helm.sh/helm/v3 < 3.17.4`\n\nPatched in:\n\n- `helm.sh/helm/v3 3.18.4`\n- `helm.sh/helm/v3 3.17.4`\n\nSource: https://osv.dev/vulnerability/GHSA-557j-xg8c-q2mm","depth":"midnight","depthScore":59,"depthScoreParts":{"impact":46.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}