Vulnerabilities

TI-2026-44064 CVE-2026-61459 · GHSA-wmg3-h8mf-wgvr

MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

HIGH 81

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security chec…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02362 Published 2026-07-10 Fixed in 3.9.0 CWE-88

TI-2026-34833 CVE-2026-47250 · GHSA-6mx4-4h42-r8vh

mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration

MEDIUM 60

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2026-06-11 Fixed in 3.7.0 CWE-88

TI-2026-34208 CVE-2026-46519 · GHSA-cr22-wjx7-2w6m

Incorrect authorization in Flux159 mcp-server-kubernetes

HIGH 73

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00513 Published 2026-06-11 Fixed in 3.6.0 CWE-863

TI-2026-06677 CVE-2026-7594 · GHSA-g38m-3x8r-8g8r

Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal

HIGH 70

A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00418 Published 2026-05-01 No fix listed CWE-22

TI-2026-28763 CVE-2026-39884 · GHSA-4xqg-gf5c-ghwq

MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting

HIGH 71

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00258 Published 2026-04-14 Fixed in 3.5.0 CWE-88

TI-2025-40841 CVE-2025-66404 · GHSA-wvxp-jp4w-w8wg

mcp-server-kubernetes potential security issue in exec_in_pod tool

HIGH 73

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2025-12-03 Fixed in 2.9.8 CWE-77

TI-2025-33320 CVE-2025-53355 · GHSA-gjv4-ghm7-q58q

mcp-server-kubernetes vulnerable to command injection in several tools

HIGH 68

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02239 Published 2025-07-08 Fixed in 2.5.0 CWE-77

Vulnerabilities

Filters

MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration

Incorrect authorization in Flux159 mcp-server-kubernetes

Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal

MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting

mcp-server-kubernetes potential security issue in exec_in_pod tool

mcp-server-kubernetes vulnerable to command injection in several tools