CVE-2025-32386 and is rated Medium severity with a CVSS score of 6.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
What to do next
Remediation and response
Microsoft Security Response Center guidance
Vendor revision: Aug 12, 2026
Vendor remediation details
CBL-Mariner Releases
Vendor-listed releases
1.12.15-4
1.11.2-23
3.15.2-3
3.14.2-6
CISA KEVNot listedBased on the latest collected catalog
EPSS0.4%Estimated 30-day exploitation probability
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships
Overview
What is CVE-2025-32386?
Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed (e.g., >800x difference).
When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issue has been resolved in Helm v3.17.3.