--- id: CVE-2025-53547 title: 'helm.sh/helm/v3: Helm Chart Code Execution (CVE-2025-53547)' summary: >- A command injection vulnerability has been identified in Helm, a package manager for Kubernetes. An attacker can craft a malicious Chart.yaml file with specially linked dependencies in a Chart.lock file. If the Chart.lock file is a symboli… severity: high cvss: 8.5 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H' cvssSource: vendor cwe: CWE-94 vendor: Red Hat product: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 affected: - deployment_validation_operator - migration_toolkit_for_applications 7 - multicluster_engine_for_kubernetes - advanced_cluster_management_for_kubernetes 2 - openshift_container_platform 4 - openshift_gitops - trusted_application_pipeline - advanced_cluster_management_for_kubernetes_2_12_for_rhel 9 - advanced_cluster_management_for_kubernetes_2_13_for_rhel 9 - multicluster_engine_for_kubernetes_2_7_for_rhel 9 - advanced_cluster_management_for_kubernetes 2.12 - advanced_cluster_management_for_kubernetes 2.13 - advanced_cluster_management_for_kubernetes 2.14 - advanced_cluster_management_for_kubernetes 2.15 - migration_toolkit_for_applications 8.2 - openshift_container_platform 4.12 - openshift_container_platform 4.13 - openshift_container_platform 4.14 - openshift_container_platform 4.15 - openshift_container_platform 4.16 - openshift_container_platform 4.17 - openshift_container_platform 4.18 - openshift_container_platform 4.19 - openshift_container_platform 4.20 patched: - advanced_cluster_management_for_kubernetes_2_12_for_rhel 9 - advanced_cluster_management_for_kubernetes_2_13_for_rhel 9 - multicluster_engine_for_kubernetes_2_7_for_rhel 9 - advanced_cluster_management_for_kubernetes 2.12 - advanced_cluster_management_for_kubernetes 2.13 - advanced_cluster_management_for_kubernetes 2.14 - advanced_cluster_management_for_kubernetes 2.15 - migration_toolkit_for_applications 8.2 - openshift_container_platform 4.12 - openshift_container_platform 4.13 - openshift_container_platform 4.14 - openshift_container_platform 4.15 - openshift_container_platform 4.16 - openshift_container_platform 4.17 - openshift_container_platform 4.18 - openshift_container_platform 4.19 - openshift_container_platform 4.20 published: '2025-07-08' updated: '2026-09-21' sourceUpdated: '2026-09-21T11:22:49+00:00' source: CSAF sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-53547.json' references: - url: >- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-53547.json - url: 'https://access.redhat.com/security/cve/CVE-2025-53547' - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2378905' - url: 'https://www.cve.org/CVERecord?id=CVE-2025-53547' - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-53547' - url: >- https://github.com/helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571 - url: 'https://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm' - url: 'https://access.redhat.com/errata/RHSA-2025:18744' - url: 'https://access.redhat.com/errata/RHSA-2025:16113' - url: 'https://access.redhat.com/errata/RHSA-2025:18278' - url: 'https://access.redhat.com/errata/RHSA-2025:19961' - url: 'https://access.redhat.com/errata/RHSA-2026:67540' - url: 'https://access.redhat.com/errata/RHSA-2025:19335' - url: 'https://access.redhat.com/errata/RHSA-2026:2572' - url: 'https://access.redhat.com/errata/RHSA-2026:67541' - url: 'https://access.redhat.com/errata/RHSA-2026:56347' - url: 'https://access.redhat.com/errata/RHSA-2025:17672' - url: 'https://access.redhat.com/errata/RHSA-2025:18242' - url: 'https://access.redhat.com/errata/RHSA-2025:16166' - url: 'https://access.redhat.com/errata/RHSA-2025:16526' - url: 'https://access.redhat.com/errata/RHSA-2025:16161' - url: 'https://access.redhat.com/errata/RHSA-2025:15681' - url: 'https://access.redhat.com/errata/RHSA-2025:16527' - url: 'https://access.redhat.com/errata/RHSA-2025:15345' - url: 'https://access.redhat.com/errata/RHSA-2025:16529' - url: 'https://access.redhat.com/errata/RHSA-2025:14821' - url: 'https://access.redhat.com/errata/RHSA-2025:16530' - url: 'https://access.redhat.com/errata/RHSA-2025:16535' - url: 'https://access.redhat.com/errata/RHSA-2025:9562' - url: 'https://github.com/helm/helm' - url: 'https://news.ycombinator.com/item?id=44506696' tags: - csaf - vex - red-hat - exploit-available - osv - go epss: 0.00378 epssPercentile: 0.31745 exploits: github: 1 githubRepos: - 'https://github.com/DVKunion/CVE-2025-53547-POC' checkedAt: '2026-09-24T07:52:53.563Z' exploitAvailable: true aliases: - GHSA-557j-xg8c-q2mm - BIT-helm-2025-53547 - GO-2025-3802 ecosystem: go ingestedAt: '2026-09-12T03:13:01.754Z' --- ## Overview A command injection vulnerability has been identified in Helm, a package manager for Kubernetes. An attacker can craft a malicious Chart.yaml file with specially linked dependencies in a Chart.lock file. If the Chart.lock file is a symbolic link to an executable file, such as a shell script, and a user attempts to update the dependencies, the crafted content is written to the symlinked file and executed. This can lead to local code execution on the system. This issue has been patched in Helm version 3.18.4, and users should update to this version to mitigate the risk. ## Vendor advisories - **RHSA-2025:18744** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 · released 2025-10-21 · [advisory](https://access.redhat.com/errata/RHSA-2025:18744) - **RHSA-2025:16113** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 · released 2025-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2025:16113) - **RHSA-2025:18278** · Red Hat · fixed in: multicluster engine for Kubernetes 2.7 for RHEL 9 · released 2025-10-21 · [advisory](https://access.redhat.com/errata/RHSA-2025:18278) - **RHSA-2025:19961** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.12 · released 2025-11-10 · [advisory](https://access.redhat.com/errata/RHSA-2025:19961) - **RHSA-2026:67540** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.13 · released 2026-09-15 · [advisory](https://access.redhat.com/errata/RHSA-2026:67540) - **RHSA-2025:19335** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.14 · released 2025-10-30 · [advisory](https://access.redhat.com/errata/RHSA-2025:19335) - **RHSA-2026:2572** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.14 · released 2026-02-11 · [advisory](https://access.redhat.com/errata/RHSA-2026:2572) - **RHSA-2026:67541** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.15 · released 2026-09-15 · [advisory](https://access.redhat.com/errata/RHSA-2026:67541) - **RHSA-2026:56347** · Red Hat · fixed in: Red Hat Migration Toolkit for Applications 8.2 · released 2026-08-18 · [advisory](https://access.redhat.com/errata/RHSA-2026:56347) - **RHSA-2025:17672** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.12 · released 2025-10-16 · [advisory](https://access.redhat.com/errata/RHSA-2025:17672) - **RHSA-2025:18242** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.13 · released 2025-10-23 · [advisory](https://access.redhat.com/errata/RHSA-2025:18242) - **Red Hat VEX** · Important · affected: Deployment Validation Operator, Migration Toolkit for Applications 7, Multicluster Engine for Kubernetes, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat OpenShift Container Platform 4, Red Hat OpenShift GitOps, … · no fix planned: Multicluster Engine for Kubernetes, Red Hat OpenShift Container Platform 4, Red Hat OpenShift GitOps, Red Hat Trusted Application Pipeline, … · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-53547.json) **helm.sh/helm/v3: Helm Chart Code Execution** — rated Important by Red Hat. Released 2025-07-08, updated 2026-09-21. Affected: - Deployment Validation Operator - Migration Toolkit for Applications 7 - Multicluster Engine for Kubernetes - Red Hat Advanced Cluster Management for Kubernetes 2 - Red Hat OpenShift Container Platform 4 - Red Hat OpenShift GitOps - Red Hat Trusted Application Pipeline Fixed: - Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 - Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 - multicluster engine for Kubernetes 2.7 for RHEL 9 - Red Hat Advanced Cluster Management for Kubernetes 2.12 - Red Hat Advanced Cluster Management for Kubernetes 2.13 - Red Hat Advanced Cluster Management for Kubernetes 2.14 - Red Hat Advanced Cluster Management for Kubernetes 2.15 - Red Hat Migration Toolkit for Applications 8.2 - Red Hat OpenShift Container Platform 4.12 - Red Hat OpenShift Container Platform 4.13 - Red Hat OpenShift Container Platform 4.14 - Red Hat OpenShift Container Platform 4.15 - Red Hat OpenShift Container Platform 4.16 - Red Hat OpenShift Container Platform 4.17 - Red Hat OpenShift Container Platform 4.18 - Red Hat OpenShift Container Platform 4.19 - Red Hat OpenShift Container Platform 4.20 No fix planned: - Multicluster Engine for Kubernetes - Red Hat OpenShift Container Platform 4 - Red Hat OpenShift GitOps - Red Hat Trusted Application Pipeline - Deployment Validation Operator - Migration Toolkit for Applications 7 - Red Hat Advanced Cluster Management for Kubernetes 2 Not affected: - Red Hat Advanced Cluster Management for Kubernetes 2.12 - Red Hat Advanced Cluster Management for Kubernetes 2.13 - Red Hat Advanced Cluster Management for Kubernetes 2.14 - Red Hat Advanced Cluster Management for Kubernetes 2.15 - Red Hat Migration Toolkit for Applications 8.2 - Red Hat OpenShift Container Platform 4.12 - Red Hat OpenShift Container Platform 4.13 - Red Hat OpenShift Container Platform 4.14 - Red Hat OpenShift Container Platform 4.15 - Red Hat OpenShift Container Platform 4.16 ## Remediation Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/errata/RHSA-2025:18744 Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/errata/RHSA-2025:16113 For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/clusters/cluster_mce_overview#mce-install-intro https://access.redhat.com/errata/RHSA-2025:18278 Workarounds / mitigations: - Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. ## Package advisory (CVE-2025-53547) Affected packages: - `helm.sh/helm/v3 >= 3.18.0-rc.1, < 3.18.4` - `helm.sh/helm/v3 < 3.17.4` Patched in: - `helm.sh/helm/v3 3.18.4` - `helm.sh/helm/v3 3.17.4` Source: https://osv.dev/vulnerability/GHSA-557j-xg8c-q2mm