Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Feisky Clear all filters
TI-2025-36936 CVE-2025-59377 · GHSA-4hqq-7q79-932p

OS command injection in feiskyer mcp-kubernetes-server

Priority HIGH 75

feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is used.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01203 Published 2025-09-15 No fix listed CWE-78
TI-2025-36935 CVE-2025-59376 · GHSA-hjm5-xgj8-vwj6

Command injection in feiskyer mcp-kubernetes-server

Priority MEDIUM 57

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00302 Published 2025-09-15 No fix listed CWE-77