70 matches found
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
mcp-server-kubernetes RCE (CVE-2026-61459)
Full-chain CVE-2026-61459: inject --server into kubectl MCP tools to exfiltrate the cluster bearer token, then create a privileged pod running the configured reverse CMD payload via the Kubernetes API. !/usr/bin/env python3 -- coding: utf-8 -- """mcp-server-kubernetes argument injection to pod RC...
SUSE CVE-2026-46519
mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.6.0, mcp-server-kubernetes exposes three environment variables ALLOWONLYREADONLYTOOLS, ALLOWONLYNONDESTRUCTIVETOOLS, ALLOWEDTOOLS documented as access controls for restricting which...
PYSEC-2026-3685 mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools kubectlget, kubectldescribe, kubectldelete that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can...
mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools kubectlget, kubectldescribe, kubectldelete that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can...
PT-2026-80657
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools kubectl get, kubectl describe, kubectl delete that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers...
mcp-server-kubernetes < 3.9.0 - Argument Injection (CVE-2026-61459)
CVE-2026-61459: argument injection in kubectlget, kubectldescribe, and kubectldelete via resourceType/name parameters. Starts a local fake Kubernetes API callback server, injects --server= into the MCP tool call, captures the bearer token from kubectl, and optionally registers a Kubernetes sessio...
mcp-server-kubernetes 3.8.x - Argument Injection
!/usr/bin/env python3 Exploit Title: mcp-server-kubernetes 3.8.x - Argument Injection CVE: CVE-2026-61459 Date: 2026-07-13 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog :...
mcp-server-kubernetes 3.8.x Argument Injection
An argument injection vulnerability in mcp-server-kubernetes versions 3.8.x via the resourceType/name parameters in kubectlget, kubectldescribe, and kubectldelete tools allows --server flag injection and bearer token exfiltration. !/usr/bin/env python3 Exploit Title: mcp-server-kubernetes 3.8.x -...
GHSA-WMG3-H8MF-WGVR mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools kubectlget, kubectldescribe, kubectldelete that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can...
mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools kubectlget, kubectldescribe, kubectldelete that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can...
Arbitrary Argument Injection
Overview mcp-server-kubernetes is a MCP server for interacting with Kubernetes clusters via kubectl Affected versions of this package are vulnerable to Arbitrary Argument Injection via the kubectlget, kubectldescribe, and kubectldelete functions. An attacker can execute arbitrary commands by...
CVE-2026-61459
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools kubectlget, kubectldescribe, kubectldelete that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can...
@toolsdk.ai/registry (1.0.83), easy-mcp-server (>=1.0.117, <=1.0.118) potentially affected by CVE-2026-61459 via mcp-server-kubernetes (>=2.4.3, <=2.9.9)
mcp-server-kubernetes NPM version =2.4.3, =1.0.117, =1.0.118 Source cves: CVE-2026-61459 Source advisory: MEND:CVE-2026-61459...
PT-2026-76009
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools kubectl get, kubectl describe, kubectl delete that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers...
CVE-2026-47250
mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the kubectlgeneric tool in mcp-server-kubernetes passes user-supplied flags directly to kubectl without any allowlist, enabling a privilege escalation attack within Kubernetes...
CVE-2026-46519
mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.6.0, mcp-server-kubernetes exposes three environment variables ALLOWONLYREADONLYTOOLS, ALLOWONLYNONDESTRUCTIVETOOLS, ALLOWEDTOOLS documented as access controls for restricting which...
CVE-2026-47250
mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the kubectlgeneric tool in mcp-server-kubernetes passes user-supplied flags directly to kubectl without any allowlist, enabling a privilege escalation attack within Kubernetes...
CVE-2026-47250 mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration
mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the kubectlgeneric tool in mcp-server-kubernetes passes user-supplied flags directly to kubectl without any allowlist, enabling a privilege escalation attack within Kubernetes...
EUVD-2026-36287
mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the kubectlgeneric tool in mcp-server-kubernetes passes user-supplied flags directly to kubectl without any allowlist, enabling a privilege escalation attack within Kubernetes...