Read the docs
TI-2026-27359 Aliases CVE-2026-35206GHSA-hr2v-4r36-88hr

Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

Priority LOW 21CWE-22Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · Low · Low
Fix status
Partial Red Hat: 3 fixed, 3 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat.

Summary

Helm is a package manager for Charts for Kubernetes. In Helm versions <=3.20.1 and <=4.1.3, a specially crafted Chart will cause helm pull --untar [chart URL | repo/chartname] to write the Chart's contents to the immediate output directory (as defaulted to the current working directory; or as given by the --destination and --untardir flags), rather than the expected output directory suffixed by the chart's name. This vulnerability is fixed in 3.20.2 and 4.1.4.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00206 10th percentileScored 2026-11-07
Fix Partial helm (helm): 4.1.4, 3.20.2helm.sh/helm/v4 (Go): 4.1.4+1 more productRed Hat: 3 advisoriesRed Hat: 3 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
helmhelm4.0.0 to before 4.1.4; before 3.20.24.1.4, 3.20.2Patch availableCNA
—helm.sh/helm/v4 (Go)before 4.1.44.1.4Patch availableGHSA-hr2v-4r36-88hr
—helm.sh/helm/v3 (Go)before 3.20.23.20.2Patch availableGHSA-hr2v-4r36-88hr
  • helm Vendorhelm Affected 4.0.0 to before 4.1.4; before 3.20.2 Fixed in 4.1.4, 3.20.2 Patch available CNA
  • helm.sh/helm/v4 (Go) Vendor— Affected before 4.1.4 Fixed in 4.1.4 Patch available GHSA-hr2v-4r36-88hr
  • helm.sh/helm/v3 (Go) Vendor— Affected before 3.20.2 Fixed in 3.20.2 Patch available GHSA-hr2v-4r36-88hr

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*before 3.20.2; 4.0.0 to before 4.1.4Vulnerablehelm
  • cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:* Versions before 3.20.2; 4.0.0 to before 4.1.4 Vulnerable ·helm

Remediation

  • Fix · CNA helm (helm) Fixed in 4.1.4, 3.20.2
  • Fix · GHSA-hr2v-4r36-88hr helm.sh/helm/v4 (Go) Fixed in 4.1.4 Advisory →
  • Fix · GHSA-hr2v-4r36-88hr helm.sh/helm/v3 (Go) Fixed in 3.20.2 Advisory →

Red Hat 3 advisories

  • RHSA-2026:30651 Released 2026-06-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.9 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +18
  • RHSA-2026:30650 Released 2026-06-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.8 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/console-mce-rhel9 +7
  • RHSA-2026:26441 Released 2026-06-16 · Red Hat rating Important
    Helm CLI v4.1.4 release
    • Helm CLI 4.1 helm-cli-4.1.4@amd64, helm-cli-4.1.4@amd64_darwin, helm-cli-4.1.4@amd64_windows +5

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Multicluster Engine for KubernetesAffected—
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet: Fix deferred
Helm CLI 4.1Fixed RHSA-2026:26441
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:30651
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:30650
Not affected: 4 products
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Security 4
  • multicluster engine for Kubernetes 2.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-35206
  2. 2026-10-03 Alias added: GHSA-hr2v-4r36-88hr
  3. 2026-10-16 Affected versions changed · Red Hat
  4. 2026-11-06 Affected versions changed · Red Hat

References

Patch 1

Advisory 2

Other 2

  • TI-2024-16848 Dependency management path traversal in helm CVSS 3.1MEDIUM 6.4
  • TI-2026-45154 Helm Files.Lines Denial of Service via Empty Chart Files CVSS 4.0MEDIUM 5.3
  • TI-2023-10627 getHostByName Function Information Disclosure CVSS 3.1MEDIUM 4.3
  • TI-2019-15264 An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. CVSS 3.1CRITICAL 9.1
  • TI-2019-13497 In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or… CVSS 3.1CRITICAL 9.8
  • TI-2019-16052 Improper certificate validation in helm CVSS 3.0CRITICAL 9.8
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences