CVE-2026-39884

creationtimestamp| type| source ---|---|--- 2026-04-15 00:29:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjinbpmszi2x 2026-04-15 17:03:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjketistps2f 2026-04-15 19:21:23+00:00| seen|...

CVE-2026-39884 MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior contain an argument injection vulnerability in the portforward tool in src/tools/portforward.ts, where a kubectl command is constructed via string concatenation with user-controlle...