CVE-2025-53355

CVE-2025-53355 – Mode C summary The vulnerability affects the mcp-server-kubernetes component of MCP Server. The root cause is unsanitized input being interpolated into shell commands via a call to shell-based child_process.execSync, enabling an attacker to inject arbitrary commands and potential...

CVE-2025-53355 mcp-server-kubernetes vulnerable to command injection in several tools

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. A command injection vulnerability exists in the mcp-server-kubernetes MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.execSync, enabling ...

ALSA-2025:10549 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: podman: podman missing TLS verification CVE-2025-6032 For more details about the security...

PT-2025-28662 · Unknown · Mcp-Server-Kubernetes

Name of the Vulnerable Software and Affected Versions: MCP Server Kubernetes versions prior to 2.5.0 Description: MCP Server Kubernetes is vulnerable to a command injection issue due to the unsanitized use of input parameters within a call to child process.execSync. This allows an attacker to...

MCP Server Kubernetes 安全漏洞

MCP Server Kubernetes is an MCP server for kubernetes management by Suyog Sonwalkar individual developer. A security vulnerability exists in MCP Server Kubernetes that stems from command injection and could lead to remote code execution...

Helm 代码注入漏洞

Helm is a Kubernetes package manager from the CNCF Foundation. A code injection vulnerability exists in Helm versions prior to 3.18.4 that stems from specially crafted Chart.yaml and Chart.lock files that could lead to native code execution...

kubernetes1.30-apiserver-1.30.14-1.1 on GA media (moderate)

kubernetes1.30-apiserver-1.30.14-1.1 on GA media Announcement ID: openSUSE-SU-2025:15234-1 Rating: moderate Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3...

kubernetes1.32-apiserver-1.32.6-1.1 on GA media (moderate)

kubernetes1.32-apiserver-1.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15236-1 Rating: moderate Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3...

kubernetes1.31-apiserver-1.31.10-1.1 on GA media (moderate)

kubernetes1.31-apiserver-1.31.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15235-1 Rating: moderate Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3...

Breaking the Bulkhead: Demystifying Cross-Namespace Reference Vulnerabilities in Kubernetes Operators

Kubernetes Operators, automated tools designed to manage application lifecycles within Kubernetes clusters, extend the functionalities of Kubernetes, and reduce the operational burden on human engineers. While Operators significantly simplify DevOps workflows, they introduce new security risks. I...

OPENSUSE-SU-2025:15235-1 kubernetes1.31-apiserver-1.31.10-1.1 on GA media

These are all security issues fixed in the kubernetes1.31-apiserver-1.31.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15236-1 kubernetes1.32-apiserver-1.32.6-1.1 on GA media

These are all security issues fixed in the kubernetes1.32-apiserver-1.32.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15234-1 kubernetes1.30-apiserver-1.30.14-1.1 on GA media

These are all security issues fixed in the kubernetes1.30-apiserver-1.30.14-1.1 package on the GA media of openSUSE Tumbleweed...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.18.19 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.19 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

infinispan: Credential Leakage in Infinispan CLI

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

Skip the Complexity: Akamai App Platform Makes Kubernetes Production-Ready - Now in GA

...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.2 packages and security update

Red Hat OpenShift Container Platform release 4.19.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.19.2 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Fedora 42 : kubernetes1.32 (2025-b8463b0972)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b8463b0972 advisory. Update to release v1.32.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

event-driven-ansible: Authenticated Argument Injection in Git URL in EDA Project Creation

A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote command. This vulnerability allows an authenticated attacker to inject arguments and execute arbitrary commands on the EDA worker. In Kubernetes/OpenShift...