CVE-2026-45132: CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Personal Access Token and SSH signing key) to fork-controlled code due to unsafe checkout and credential handling practices. This issue has been patched via commit fcf9302.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CloudPirates Open Source Helm Chartsto a version that resolves this vulnerability.Patch fcf9302
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45132?
The severity of CVE-2026-45132 is critical with a score of 10.
What are the main vulnerabilities identified in CVE-2026-45132?
CVE-2026-45132 involves unsafe credential handling in GitHub Actions that leads to exposure of Personal Access Tokens and SSH signing keys.
How do I fix CVE-2026-45132?
To fix CVE-2026-45132, update your GitHub Actions workflows to prevent exposure of sensitive credentials by implementing secure checkout practices.
What software is affected by CVE-2026-45132?
The affected software is CloudPirates Open Source Helm Charts.
When was CVE-2026-45132 published?
CVE-2026-45132 was published on June 1, 2026.