Skip to main content

Kubernetes CVE-2026-35205

| EUVDEUVD-2026-20901 HIGH
Not Failing Securely ('Failing Open') (CWE-636)
2026-04-09 GitHub_M GHSA-q5jf-9vfq-h4h7
Information Disclosure Kubernetes Helm
8.4
CVSS 4.0 · Vendor: GitHub_M
Share

Severity by source

Vendor (GitHub_M) PRIMARY
8.4 HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
SUSE
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Red Hat
8.0 HIGH
qualitative

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
A
Scope
X

Lifecycle Timeline

6
Analysis Updated
Apr 17, 2026 - 14:12 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Apr 17, 2026 - 14:07 vuln.today
cvss_changed
Patch released
Apr 10, 2026 - 20:30 nvd
Patch available
EUVD ID Assigned
Apr 09, 2026 - 15:30 euvd
EUVD-2026-20901
Analysis Generated
Apr 09, 2026 - 15:30 vuln.today
CVE Published
Apr 09, 2026 - 15:06 nvd
HIGH 8.4

DescriptionCVE.org

Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.

AnalysisAI

Helm 4.0.0 through 4.1.3 silently installs Kubernetes plugins without cryptographic provenance verification even when signature verification is explicitly required, allowing local attackers to deliver malicious plugins that execute with Helm's privileges during installation. The flaw (CWE-636: Not Failing Securely) enables supply chain attacks where unsigned or tampered plugins bypass security controls intended to validate plugin integrity. Fixed in Helm 4.1.4. EPSS score is 2nd percentile (0.01% exploitation probability), no active exploitation confirmed, SSVC assessment indicates total technical impact but non-automatable exploitation requiring user interaction.

Technical ContextAI

Helm is the package manager for Kubernetes applications, managing Charts (application definitions) and plugins that extend Helm functionality. The vulnerability affects Helm's plugin installation mechanism, specifically the provenance verification subsystem. Provenance files (.prov) contain cryptographic signatures that validate plugin authenticity and integrity using PGP signatures. The root cause is CWE-636 (Not Failing Securely) - when signature verification is enabled but a .prov file is missing, Helm 4.0.0-4.1.3 continues installation rather than failing closed. This violates the security principle that verification failures should halt operations. The CVSS 4.0 vector (AV:L/AC:L/PR:N/UI:A) indicates local attack vector with low complexity requiring user interaction, suggesting attackers must convince administrators to install malicious plugins via 'helm plugin install' commands. The CPE string cpe:2.3:a:helm:helm identifies the affected product as Helm itself across versions 4.0.0 to 4.1.3.

RemediationAI

Upgrade Helm to version 4.1.4 or later, released March 2026, which restores fail-secure behavior by rejecting plugin installations when provenance files are missing during signature verification. Download from official release page at https://github.com/helm/helm/releases/tag/v4.1.4. The fix implementation is visible in commit 05fa37973dc9e42b76e1d2883494c87174b6074f. For environments unable to upgrade immediately, implement compensating controls: restrict plugin installation to explicitly vetted sources by enforcing repository allowlisting in Helm configuration, manually verify plugin provenance signatures before installation using 'helm verify' commands against trusted public keys, disable plugin functionality entirely if not operationally required, and audit existing installed plugins for unsigned packages using Helm plugin list commands cross-referenced with provenance availability. Note that disabling plugins eliminates extensibility features used by some Kubernetes workflows. Monitor Helm plugin installation events through audit logging to detect unauthorized plugin additions. Review and rotate any credentials or secrets accessible to previously installed unverified plugins as they may have been compromised.

More in Kubernetes

View all
CVE-2025-1974 CRITICAL POC
9.8 Mar 25

A critical vulnerability in Kubernetes ingress-nginx controller allows unauthenticated attackers with pod network access
CVE-2026-45321 CRITICAL POC
9.6 May 12

Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
CVE-2025-1098 HIGH POC
8.8 Mar 25

Kubernetes ingress-nginx contains a configuration injection vulnerability via the mirror-target and mirror-host Ingress

CVE-2025-24514 HIGH POC
8.8 Mar 25

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingres
CVE-2025-1097 HIGH POC
8.8 Mar 25

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-c
CVE-2020-8554 MEDIUM POC
6.3 Jan 21

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter
CVE-2025-55190 CRITICAL POC
9.9 Sep 04

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Rated critical severity (CVSS 9.9), this vulne
CVE-2018-18843 CRITICAL POC
10.0 Dec 04

The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4
CVE-2026-22039 CRITICAL POC
9.9 Jan 27

Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass
CVE-2024-42480 CRITICAL POC
9.9 Aug 12

Kamaji is the Hosted Control Plane Manager for Kubernetes. Rated critical severity (CVSS 9.9), this vulnerability is rem
CVE-2023-28110 CRITICAL POC
9.9 Mar 16

Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, ref
CVE-2026-25996 CRITICAL POC
9.8 Feb 12

String filter bypass in Inspektor Gadget Kubernetes eBPF tooling before fix. Insufficient string escaping enables filter

Same weakness CWE-636 – Not Failing Securely ('Failing Open')

View all
CVE-2026-22034 CRITICAL POC
9.8
CVE-2024-3729 CRITICAL
9.8
CVE-2026-40525 CRITICAL
9.1
CVE-2024-43532 HIGH
8.8
CVE-2021-1578 HIGH
8.8
CVE-2026-54291 HIGH
8.2
CVE-2023-4030 HIGH
7.8
CVE-2026-42423 HIGH
7.7

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: High
Product Status
openSUSE Tumbleweed Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Micro 5.5 Fixed
SUSE Linux Enterprise Module for Containers 15 SP7 Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP7 Fixed

Share

CVE-2026-35205 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy