Loading story…
Helm corrected CVE-2024-25620, which lets a chart with relative-path components in its Chart.yaml name write files outside the intended dependency directory, and CVE-2024-26147, in which metadata-free malformed index.yaml or plugin.yaml files can trigger a panic. The latter can be exploited through repository processing or a malicious installed plugin; because Helm enumerates known plugins at startup, it can cause every Helm invocation to fail. The issues affect both the Helm CLI and SDK users; fixes are available in Helm 3.14.1 for the path traversal flaw and 3.14.2 for the panic condition.
Red Hat shipped remediations through updates including Advanced Cluster Management for Kubernetes 2.9.3 and OpenShift GitOps 1.12.4, with related advisories covering affected OpenShift Container Platform and Advanced Cluster Security releases. Organizations should upgrade to a fixed Helm release or applicable Red Hat container updates, inspect charts and dependencies for relative-path manipulation in Chart.yaml names, and remove untrusted or malicious plugins; SDK consumers that cannot immediately upgrade should recover safely from panics around affected repository and plugin-processing calls.
See affected versions and whether adversaries are exploiting it.
7 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2024:6236, a Moderate-severity security and bug-fix advisory for Advanced Cluster Management for Kubernetes 2.10.5 on RHEL 9 x86_64. The update provides container images that address OpenTelemetry denial-of-service flaws CVE-2023-45142 and CVE-2023-47108, among other listed CVEs.
Red Hat published RHSA-2024:4626, a Moderate-severity update for OpenShift GitOps 1.11.6. It remediated CVE-2024-24786, CVE-2024-26147, and CVE-2024-25620 in the Argo CD container, along with multiple vulnerabilities in the Redis container.
Red Hat published RHSA-2024:4163 for OpenShift GitOps v1.12.4. The Moderate-severity update remediated the two Helm vulnerabilities as well as CVE-2024-24786, an invalid-JSON infinite-loop denial-of-service flaw in golang-protobuf.
Red Hat published RHSA-2024:1549, a Critical advisory for Advanced Cluster Security for Kubernetes 4.3, delivering RHACS 4.3.6 images. The update remediates go-git path traversal/RCE flaw CVE-2023-49569 and Helm flaws CVE-2024-26147 and CVE-2019-25210, and fixes a Jira-notifier crash-loop defect.
Red Hat published RHSA-2024:1328 for Advanced Cluster Management for Kubernetes 2.9.3. The Moderate-severity update remediated CVE-2024-25620 and CVE-2024-26147, along with two OpenTelemetry denial-of-service flaws.
Helm resolved CVE-2024-26147 in version 3.14.2. Malformed index.yaml or plugin.yaml files lacking expected metadata could trigger a panic, including on every client invocation when caused by a known malicious plugin.
Helm resolved CVE-2024-25620 in version 3.14.1. A chart name containing relative-path components in Chart.yaml could cause a chart to be saved outside its intended directory through the Helm client or SDK.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
7 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Helm disclosed two high-severity flaws in its plugin handling that affect versions `4.0.0` through `4.1.3`, including **CVE-2026-35204** and **CVE-2026-35205**. The first bug is a path traversal issue in plugin metadata that lets a specially crafted plugin use `../` sequences in the `version` field of `plugin.yaml` to write files outside the intended Helm plugin directory during installation or update, creating a risk of arbitrary file write on the local filesystem. The second flaw causes Helm to fail open on plugin provenance checks, allowing installation of plugins without a `.prov` file even when signature verification is required. Both issues were addressed in **Helm `4.1.4`**, with fixes published through the project release and corresponding GitHub security advisories, and users running affected Helm 4 releases are advised to upgrade to the patched version.
Jun 29, 2026
Red Hat Advanced Cluster Management for Kubernetes 2 is affected by **CVE-2026-10090**, an Important privilege escalation flaw in the `multicluster-operators-subscription` component that can let a user with namespace-scoped `edit` rights gain full `cluster-admin` access. Red Hat assigned the issue a **CVSS v3.1 score of 9.9**, and the Canadian Centre for Cyber Security issued advisory **AV26-803** urging organizations to review Red Hat guidance and apply updates when available. According to Red Hat's bug report and CVE record, the Application Subscription controller can be abused by creating a malicious Channel and Subscription that point to an attacker-controlled Helm repository. The controller then applies the Helm chart with elevated privileges without verifying the creator holds the required `open-cluster-management:subscription-admin` role and without restricting deployed resources to the subscription namespace, allowing deployment of cluster-scoped objects such as a `ClusterRoleBinding` that grants the attacker's ServiceAccount the `cluster-admin` ClusterRole. Red Hat said no mitigation meeting its product security criteria is currently available, and credited Christopher Lusk of North Echo Security Research with reporting the flaw.
Aug 14, 2026
Red Hat released Important security updates for Red Hat OpenShift Container Platform and RHEL 9 Podman and Buildah deployments to remediate container-stack vulnerabilities, notably **CVE-2024-9675** and **CVE-2024-9676**. CVE-2024-9675 can permit arbitrary directory mounts through Buildah, while CVE-2024-9676 is a `containers/storage` symlink-traversal flaw affecting Podman, Buildah, and CRI-O. When a malicious image runs with automatically assigned user namespaces, the latter can cause container creation to block indefinitely or CRI-O to exhaust memory and crash; limited error-message disclosure is also possible to the user operating the affected software. Affected OpenShift releases include 4.12, 4.13, 4.14, 4.15, 4.16, 4.17, and 4.18, with related advisories also addressing flaws such as Dockerfile bind-propagation validation, FIPS crypto-policy mounting, Distribution JWT signing-key injection, and denial-of-service issues in Go, BIND, libxml2, GRUB2, and the Linux kernel. Red Hat advises OpenShift customers to update clusters through their supported release channels using the CLI or web console, and RHEL 9 users to deploy the updated Podman or Buildah packages for their supported architecture and subscription channel.
Aug 26, 2026