Flux159

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Flux159 records in CISA KEV

No Flux159 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mcp-server-kubernetes 3 records HIGH

Records

3 records in Mcp-server-kubernetes · all components

TI-2026-44064 CVE-2026-61459 · GHSA-wmg3-h8mf-wgvr

MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

HIGH 81

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security chec…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02362 Published 2026-07-10 Fixed in 3.9.0 CWE-88

TI-2025-40841 CVE-2025-66404 · GHSA-wvxp-jp4w-w8wg

mcp-server-kubernetes potential security issue in exec_in_pod tool

HIGH 73

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2025-12-03 Fixed in 2.9.8 CWE-77

TI-2026-28763 CVE-2026-39884 · GHSA-4xqg-gf5c-ghwq

MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting

HIGH 71

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00258 Published 2026-04-14 Fixed in 3.5.0 CWE-88

Open these records in search →

Critical	1
High	4
Medium	2
Low	0
No CVSS	0