Skip to content
Threat Feed
Subscribe

Vendor

Helm

2 briefs RSS
high advisory

Helm Plugin Path Traversal Vulnerability

A path traversal vulnerability in Helm versions 4.0.0 to 4.1.3 allows a malicious plugin to write files to arbitrary locations on the filesystem, leading to potential system compromise.

PoC Helm path-traversal vulnerability plugin kubernetes
2r 1t 1c 8i updated
high advisory

Helm Plugin Verification Bypass Vulnerability

Helm versions 4.0.0 through 4.1.3 fail to enforce plugin signature verification when the .prov file is missing, allowing installation of unsigned plugins and potentially leading to arbitrary code execution.

Helm kubernetes plugin signature-bypass cve-2026-35205
2r 2t 1c