All products

mcp-server-kubernetes

npm · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
mcp-server-kubernetes argument injection can expose Kubernetes cluster credentialsCVE-2026-61459 · GHSA-WMG3-H8MF-WGVR mcp-server-kubernetesmcp-server-kubernetes npmPyPI Critical Fix reported
MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer EnforcementCVE-2026-46519 · GHSA-CR22-WJX7-2W6M mcp-server-kubernetes npm High Fix reported
MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltrationCVE-2026-47250 · GHSA-6MX4-4H42-R8VH mcp-server-kubernetes npm Medium Fix reported
MCP Server Kubernetes has an Argument Injection in port_forward tool via space-splittingCVE-2026-39884 · GHSA-4XQG-GF5C-GHWQ mcp-server-kubernetes npm High Fix reported
MCP Server Kubernetes vulnerable to command injection in several toolsCVE-2025-53355 · GHSA-GJV4-GHM7-Q58Q mcp-server-kubernetes npm High Fix reported
mcp-server-kubernetes has potential security issue in exec_in_pod toolCVE-2025-66404 · GHSA-WVXP-JP4W-W8WG mcp-server-kubernetes npm Medium Fix reported