Lucene search
+L

9 matches found

Cvelist
Cvelist
•added 2026/09/17 7:52 p.m.•54 views

CVE-2026-50125 MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion

MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpoint and pkg/mcp/server.go registers the unauthenticated getresource tool, which accepts attacker-controlled limitBytes and tailLines values for the pods logs subresource...

7.5CVSS0.00488EPSS
SaveExploits0References2
Rows per page
Query Builder