Vulnerabilities

TI-2026-44064 CVE-2026-61459 · GHSA-wmg3-h8mf-wgvr

MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

HIGH 81

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security chec…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02362 Published 2026-07-10 Fixed in 3.9.0 CWE-88

TI-2026-28763 CVE-2026-39884 · GHSA-4xqg-gf5c-ghwq

MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting

HIGH 71

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00258 Published 2026-04-14 Fixed in 3.5.0 CWE-88

TI-2025-40841 CVE-2025-66404 · GHSA-wvxp-jp4w-w8wg

mcp-server-kubernetes potential security issue in exec_in_pod tool

HIGH 73

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2025-12-03 Fixed in 2.9.8 CWE-77

Vulnerabilities

Filters

MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting

mcp-server-kubernetes potential security issue in exec_in_pod tool