All 6 CVE vulnerabilities found in mcp-server-kubernetes, with AI-generated Chinese analysis, references, and POCs.
Vendor: Flux159
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-61459 | MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools CWE-88 | 9.8 | Critical | 2026-07-10 |
| CVE-2026-47250 | mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration CWE-88 | 6.1 | Medium | 2026-06-11 |
| CVE-2026-46519 | mcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer Enforcement CWE-863 | 8.8 | High | 2026-06-11 |
| CVE-2026-39884 | MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting CWE-88 | 8.3 | High | 2026-04-14 |
| CVE-2025-66404 | mcp-server-kubernetes potential security issue in exec_in_pod tool CWE-77 | 6.4 | Medium | 2025-12-03 |
| CVE-2025-53355 | mcp-server-kubernetes vulnerable to command injection in several tools CWE-77 | 7.5 | High | 2025-07-08 |
All 6 known CVE vulnerabilities affecting mcp-server-kubernetes with full Chinese analysis, references, and POCs where available.