VulnerabilityAnalyzed

CVE-2026-61459

CRITICAL 9.3EPSS 2.10%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.

CVSS 4.0: 9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 2.10% probability · 81th percentile
CISA KEV: Not listed
Weakness: CWE-88
Affected: suyogs/mcp-server-kubernetes
Source: disclosure@vulncheck.com

References

https://github.com/Flux159/mcp-server-kubernetes/commit/d7890f50a4567bf5d9842541ba6f41e180227f9aPatch
https://github.com/Flux159/mcp-server-kubernetes/issues/328Issue Tracking, Exploit, Mitigation, Vendor Advisory
https://github.com/Flux159/mcp-server-kubernetes/pull/329Issue Tracking, Patch
https://github.com/Flux159/mcp-server-kubernetes/releases/tag/3.9.0Release Notes
https://www.vulncheck.com/advisories/mcp-server-kubernetes-argument-injection-via-kubectl-structured-toolsThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.