CVE-2026-35205High· 7.8▾ TwilightHelm's plugin verification fails open when .prov is missing, allowing unsigned plugin install
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.2%
Helm is a package manager for Charts for Kubernetes. In Helm versions >=4.0.0 and <=4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required.
The bug allows plugin authors to omit provenance (signing) data from plugins, bypassing plugin signature verification upon plugin install/update.
Notably, plugin hooks will be executed as designed on the installed plugin, enabling a malicious plugin to execute arbitrary code.
This issue has been patched in Helm v4.1.4
Installing/updating a plugin with missing provenance will error if signature verification is required.
Users may manually validate that a plugin archive is not missing provenance data (.prov file) before installation.
helm.sh/helm/v4 >= 4.0.0, < 4.1.4Upgrade to a patched release:
helm.sh/helm/v4 4.1.4Connected by shared product, vendor, weakness, or advisory.
CVE-2026-35204High· 8.6Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory
CVE-2026-35206MediumHelm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
CVE-2022-36055Medium· 6.5Helm Vulnerable to denial of service through string value parsing
CVE-2025-32387Medium· 6.5Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
CVE-2025-32386Medium· 6.5Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
CVE-2020-15186Low· 3.4Improper Sanitizing of plugin names in helm