CVE-2026-61459 EXPLOIT
9.8
CRITICAL · CVSS 3.1 · EPSS 2.4% (pctl 83)
Patch early
A public exploit exists.
Description
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.36% — more likely to be exploited than 83% of all CVEs |
| Weakness | CWE-88 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2026-07-10 |
| Last modified | 2026-07-17 |
Affected (1)
| Vendor | Product |
|---|---|
| suyogs | mcp-server-kubernetes |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | mcp-server-kubernetes 3.8.x - Argument Injection | 2026-08-11 |
References
- https://github.com/Flux159/mcp-server-kubernetes/commit/d7890f50a4567bf5d9842541ba6f41e180227f9a
- https://github.com/Flux159/mcp-server-kubernetes/issues/328
- https://github.com/Flux159/mcp-server-kubernetes/pull/329
- https://github.com/Flux159/mcp-server-kubernetes/releases/tag/3.9.0
- https://www.vulncheck.com/advisories/mcp-server-kubernetes-argument-injection-via-kubectl-structured-tools
→ the Explorer · watch your stack · NVD