What’s Vulnerable › Products

Flux159 mcp-server-kubernetes vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Flux159 mcp-server-kubernetes version is affected

Latest Flux159 mcp-server-kubernetes vulnerabilities

• CVE-2026-61459 — MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools (CVSS 9.8)
• CVE-2026-47250 — mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration (CVSS 6.1)
• CVE-2026-46519 — mcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer Enforcement (CVSS 8.8)
• CVE-2026-39884 — MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting (CVSS 8.1)
• CVE-2025-66404 — mcp-server-kubernetes potential security issue in exec_in_pod tool (CVSS 8.8)
• CVE-2025-53355 — mcp-server-kubernetes vulnerable to command injection in several tools (CVSS 7.5)