Executive brief
A security flaw in the CloudPirates Helm Charts automation system allowed external contributors to steal sensitive administrative credentials. By submitting a malicious pull request, an attacker could gain access to a Personal Access Token and SSH signing keys used by the project's automated bots. This access could allow an attacker to modify the project's code, bypass security controls, or forge signed commits, potentially compromising the integrity of the software distributed to users.
Technical details
The 'generate-schema.yaml' GitHub Actions workflow used the 'pull_request_target' trigger in combination with an unsafe checkout of attacker-controlled code. Specifically, the workflow checked out the head SHA of a pull request using a privileged Personal Access Token (CHANGELOG_PAT). Because the checkout action stores the token in the local Git credential store, any subsequent step—including those running code from the malicious fork—could exfiltrate the token. Additionally, an SSH signing key was written to disk early in the process, making it accessible to the same malicious code. This allows an unauthenticated attacker to gain high-privilege access to the repository. The issue was fixed in commit fcf9302 by implementing explicit re-approval requirements and restricting credential usage.
Affected products
- CloudPirates-io Open Source Helm Charts Prior to commit fcf9302
Timeline
- 2026-05-12: advisory: Internal advisory published by maintainers
- 2026-06-01: disclosed: CVE published to NVD
- 2026-06-01: patched: Fix committed to main branch