---
id: CVE-2026-35206
title: >-
  github.com/helm/helm: Helm: Files written to unexpected directory via
  specially crafted Chart (CVE-2026-35206)
summary: >-
  A flaw was found in Helm, a package manager for Kubernetes. A remote attacker
  could exploit this vulnerability by providing a specially crafted Chart to the
  `helm pull --untar` command. This would cause the Chart's contents to be
  written t…
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L'
cvssSource: vendor
cwe: CWE-22
vendor: Red Hat
product: Multicluster Engine for Kubernetes
affected:
  - advanced_cluster_management_for_kubernetes 2
  - multicluster_engine_for_kubernetes
  - helm_cli 4.1
  - advanced_cluster_management_for_kubernetes 2.13
  - multicluster_engine_for_kubernetes 2.8
patched:
  - helm_cli 4.1
  - advanced_cluster_management_for_kubernetes 2.13
  - multicluster_engine_for_kubernetes 2.8
published: '2026-04-09'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T11:23:08+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35206.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35206.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-35206'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2457151'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-35206'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-35206'
  - url: >-
      https://github.com/helm/helm/commit/4e7994d4467182f535b6797c94b5b0e994a91436
  - url: 'https://github.com/helm/helm/releases/tag/v4.1.4'
  - url: 'https://github.com/helm/helm/security/advisories/GHSA-hr2v-4r36-88hr'
  - url: 'https://access.redhat.com/errata/RHSA-2026:26441'
  - url: 'https://access.redhat.com/errata/RHSA-2026:30651'
  - url: 'https://access.redhat.com/errata/RHSA-2026:30650'
  - url: 'https://github.com/helm/helm'
tags:
  - csaf
  - vex
  - red-hat
  - osv
  - go
epss: 0.00199
epssPercentile: 0.0959
aliases:
  - GHSA-hr2v-4r36-88hr
  - BIT-helm-2026-35206
  - GO-2026-5435
ecosystem: go
ingestedAt: '2026-07-25T19:08:11.549Z'
---

## Overview

A flaw was found in Helm, a package manager for Kubernetes. A remote attacker could exploit this vulnerability by providing a specially crafted Chart to the `helm pull --untar` command. This would cause the Chart's contents to be written to an unintended directory, potentially overwriting existing files or placing malicious files in an accessible location, leading to data integrity and availability issues.

## Vendor advisories

- **RHSA-2026:26441** · Red Hat · fixed in: Helm CLI 4.1 · released 2026-06-16 · [advisory](https://access.redhat.com/errata/RHSA-2026:26441)
- **RHSA-2026:30651** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.13 · released 2026-06-28 · [advisory](https://access.redhat.com/errata/RHSA-2026:30651)
- **RHSA-2026:30650** · Red Hat · fixed in: multicluster engine for Kubernetes 2.8 · released 2026-06-28 · [advisory](https://access.redhat.com/errata/RHSA-2026:30650)
- **Red Hat VEX** · Moderate · affected: Red Hat Advanced Cluster Management for Kubernetes 2, Multicluster Engine for Kubernetes · no fix planned: Red Hat Advanced Cluster Management for Kubernetes 2 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35206.json)

**github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart** — rated Moderate by Red Hat. Released 2026-04-09, updated 2026-10-16.

Affected:

- Red Hat Advanced Cluster Management for Kubernetes 2
- Multicluster Engine for Kubernetes

Fixed:

- Helm CLI 4.1
- Red Hat Advanced Cluster Management for Kubernetes 2.13
- multicluster engine for Kubernetes 2.8

No fix planned:

- Red Hat Advanced Cluster Management for Kubernetes 2

Not affected:

- Red Hat Advanced Cluster Management for Kubernetes 2.13
- multicluster engine for Kubernetes 2.8
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Advanced Cluster Security 4

## Remediation

Download the Helm CLI v4.1.4 binaries for your platform from https://mirror.openshift.com/pub/cgw/helm/4.1.4/ https://access.redhat.com/errata/RHSA-2026:26441
Before you apply this update, make sure all previously released errata
that are relevant to your system are applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:30651
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:

https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro https://access.redhat.com/errata/RHSA-2026:30650

## Package advisory (CVE-2026-35206)

Affected packages:

- `helm.sh/helm/v4 < 4.1.4`
- `helm.sh/helm/v3 < 3.20.2`

Patched in:

- `helm.sh/helm/v4 4.1.4`
- `helm.sh/helm/v3 3.20.2`

Source: https://osv.dev/vulnerability/GHSA-hr2v-4r36-88hr