Web Hack List

Preliminary research

Charting your way in: Helm template injection

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Follows attacker-controlled Helm values into YAML rendered by a privileged ArgoCD deployment. Multiline values, quoting and document separators create extra resources; comparing Helm versions shows that an invalid later resource may leave earlier objects applied. Exploitation depends on deployment-account privileges and admission policy.

Record

Researcher
Paul Barbé
Published by
Synacktiv

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Paul Barbé, first published at the original source. Preserved copies are kept so the citation survives its host.