CVE-2026-54532: CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pullrequesttarget workflow is vulnerable to cache poisoning and OIDC token theft. A pullrequesttarget workflow checks out fork code using github.event.pullrequest.head.sha or .head.ref. This gives attacker-controlled code access to base repository secrets and tokens. A pullrequesttarget workflow writes to a shared Actions cache. A subsequent release or publish workflow restores from the same cache scope, allowing a poisoned cache entry to execute during release. This issue has been patched via commit 271d415.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CloudPirates Open Source Helm Chartsto a version that resolves this vulnerability.Patch 271d415
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker who can submit a pull request from a fork can supply code that is checked out by the pull_request_target workflow. Exploitation also requires a workflow run in which that attacker-controlled code can access the base repository's secrets or tokens.
What is the potential impact beyond the pull request workflow?
The vulnerable workflow can write attacker-controlled content to a shared GitHub Actions cache. If a later release or publish workflow restores content from that cache scope, the poisoned cache entry can execute during that workflow.
Which versions or configurations are affected?
The issue affects the repository state before commit 271d415. The vulnerable condition is a pull_request_target workflow that checks out fork code using github.event.pull_request.head.sha or github.event.pull_request.head.ref and shares an Actions cache scope with release or publish workflows.
How can I determine whether remediation is present?
Verify that the repository includes commit 271d415. Also review pull_request_target workflows for checkouts of pull-request head SHA or head ref and confirm they cannot write to caches restored by release or publish workflows.