CVE-2026-35205
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Helm versions 4.0.0 through 4.1.3 install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in version 4.1.4.
Risk Assessment
The organization may install unauthorized or malicious plugins, leading to Kubernetes cluster integrity compromise and potential resource takeover.
Recommendation
Immediately upgrade Helm to version 4.1.4 or later and verify all installed plugins for compliance with security requirements.
Other vulnerabilities in Helm
See all- CVE-2026-66016Medium
Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users.
- CVE-2026-63308Medium
A denial of service vulnerability in Helm through version 4.2.3 (fixed in commit ba6c9a2) causes an index out of range panic in the Files.Lines template helper in pkg/engine/files.go. Attackers can include empty files in Helm charts, leading to deterministic render failures during template, install, upgrade, lint, and SDK Engine.Render operations.
- CVE-2026-35204High
A vulnerability in Helm from version 4.0.0 to 4.1.3 allows writing plugin contents to arbitrary filesystem locations via a crafted 'version' field in plugin.yaml containing '/../' (dot-dot) path separators.
Original NVD description (English source)
Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.