AI agent vulnerability · Other MCP servers and tools

CVE-2026-61459: mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials

criticalCVSS 4.0 9.3 · 3.1 9.8GHSA-wmg3-h8mf-wgvr

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectlget, kubectldescribe, kubectldelete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes.

Published Jul 10, 2026 · Updated Aug 12, 2026

Affected packages

mcp-server-kubernetes

Ecosystem: PyPI
Affected: < 3.9.0
Fixed in: 3.9.0
Check: pip show mcp-server-kubernetes

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.

Credited to PercevalFox.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries