CVE-2026-35205— Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-35205
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install
Source: NVD (National Vulnerability Database)
Vulnerability Description
Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
未能安全地进行程序失效(Failing Open)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Helm 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Helm是CNCF基金会的一款Kubernetes包管理器。 Helm 4.1.3及之前版本存在安全漏洞，该漏洞源于在需要签名验证时仍会安装缺少来源证明的插件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-35205
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-35205
请登录查看更多情报信息。
- Release Helm v4.1.4 · helm/helm · GitHubx_refsource_MISC
- Helm Provenance and Integrity | Helmx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2026-35205
Same Patch Batch · helm · 2026-04-09 · 3 CVEs total
| CVE-2026-35204 | Helm has a path traversal in plugin metadata version enables arbitrary file write outside | |
| CVE-2026-35206 | Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment |
IV. Related Vulnerabilities
Same product: helm
- CVE-2026-35206
Helm Chart extraction output directory collapse via `Chart.y - CVE-2026-35204
Helm has a path traversal in plugin metadata version enables - CVE-2026-25750
LangSmith Studio has URL Parameter Injection Vulnerability t - CVE-2025-55198
Helm May Panic Due To Incorrect YAML Content - CVE-2025-55199
Helm Charts with Specific JSON Schema Values Can Cause Memor
Same vendor: helm
- CVE-2026-35206
Helm Chart extraction output directory collapse via `Chart.y - CVE-2026-35204
Helm has a path traversal in plugin metadata version enables - CVE-2025-55198
Helm May Panic Due To Incorrect YAML Content - CVE-2025-55199
Helm Charts with Specific JSON Schema Values Can Cause Memor - CVE-2025-53547
Helm Chart Dependency Updating With Malicious Chart.yaml Con
Same weakness: CWE-636
- CVE-2026-42423
OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Byp - CVE-2026-41377
OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plu - CVE-2026-41334
OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service - CVE-2026-40525
OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenA - CVE-2026-32970
OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via
V. Comments for CVE-2026-35205
No comments yet