CVE-2026-35205 Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install
Helm fails open on missing provenance files, allowing installation of unsigned plugins when signature verification is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-35205?
CVE-2026-35205 is a high-severity vulnerability in helm, published on 9 Apr 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.
Which versions are affected by CVE-2026-35205?
4 open source packages ship an affected version, including helm.sh/helm/v4 and helm. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
helm.sh/helm/v4 Go | From 4.0.0 | 4.1.4 |
helm.sh/helm/v4 Go | From 4.0.0 | 4.1.4 |
helm.sh/helm/v4 Go | From 4.0.0 | 4.1.4 |
helm Bitnami | From 4.0.0 | 4.1.4 |
Products include Helm Helm.
How do I fix CVE-2026-35205?
Upgrade helm.sh/helm/v4 to 4.1.4 or later.
Is CVE-2026-35205 being exploited?
There is no known exploitation of CVE-2026-35205 in the wild and no public exploit code.
Other vulnerabilities in helm
- CVE-2019-18658 Helm Unsafe Link Following
- CVE-2019-1010275 Helm Improper Certificate Validation
- CVE-2019-25210 Information disclosure in n/a
- CVE-2025-53547 Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution
- CVE-2020-11013 lookup Function Information Discolosure in Helm
Sources
Also known as BIT-helm-2026-35205, CLEANSTART-2026-KS65231, GHSA-q5jf-9vfq-h4h7, GO-2026-5566, MINI-38fw-79v2-jhp9, MINI-45xv-g8vm-36qf and 5 more.