Web Hack List

Preliminary research

Charting your way in: Helm template injection

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Follows attacker-controlled Helm values into YAML rendered by a privileged ArgoCD deployment. Multiline values, quoting and document separators create extra resources; comparing Helm versions shows that an invalid later resource may leave earlier objects applied. Exploitation depends on deployment-account privileges and admission policy.

Record

Researcher
Paul Barbé
Published by
Synacktiv
Topic
Injection

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Paul Barbé, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .