CVE-2026-35206 Helm路径覆盖漏洞

# CVE-2026-35206 PoC Concept # This PoC demonstrates the potential impact of the path overwrite vulnerability. # An attacker creates a malicious chart containing a file intended to overwrite a victim's file. import os # 1. Simulate the victim's critical file in the current working directory critical_file = "config.yaml" with open(critical_file, "w") as f: f.write("production_settings: true") print(f"[+] Created victim's critical file: {critical_file}") # 2. In a real attack scenario, the attacker creates a malicious chart. # When the victim runs: helm pull --untar <malicious-chart-url> # Instead of creating a folder like 'malicious-chart/', Helm extracts files to the current directory. # If the malicious chart contains 'config.yaml', it overwrites the victim's file. print("[!] Vulnerability Triggered:") print(f" Running 'helm pull --untar <malicious-chart>' would overwrite {critical_file}") print(" with the attacker's content due to improper path handling.")