BIT-HELM-2025-53547 Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

🗓️ 10 Jul 2025 05:43:09Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Helm prior to 3.18.4 can execute code via malicious Chart.yaml and symlink during dependency updates.

Reporter	Title	Published	Views	Family All 154
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	7 Aug 202508:11	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to local code execution due to the Helm package manager (CVE-2025-53547)	20 Nov 202514:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	28 Oct 202505:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	21 Oct 202514:44	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	19 Dec 202520:44	–	ibm
GithubExploit	Exploit for CVE-2025-53547	9 Jul 202509:03	–	githubexploit
AlpineLinux	CVE-2025-53547	8 Jul 202521:39	–	alpinelinux
Information Security Automation	August Linux Patch Wednesday	4 Sep 202508:28	–	avleonov
BDU FSTEC	The vulnerability of the package manager for Kubernetes Helm, related to improper code generation management, allows a attacker to execute arbitrary code.	8 Sep 202500:00	–	bdu_fstec
CBLMariner	CVE-2025-53547 affecting package helm for versions less than 3.14.2-7	16 Jul 202515:08	–	cbl_mariner

Source	Link
github	www.github.com/helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571
github	www.github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm
news	www.news.ycombinator.com/item
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-53547

04 Sep 2025 09:06Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18.5 - 8.6

EPSS0.00363

SSVC