Lucene search
+L

1 matches found

osv-cve
osv-cve
•added 2026/09/17 7:52 p.m.•12 views

CVE-2026-50125 MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion

MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpoint and pkg/mcp/server.go registers the unauthenticated getresource tool, which accepts attacker-controlled limitBytes and tailLines values for the pods logs subresource...

7.5CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder