Skip to main content
cve.nowby Sazabi
← npm
npmPackage

mcp-server-kubernetes

6 known vulnerabilities (1 critical, 3 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical, 3 high, 2 medium
Weekly downloads
19.1K
Dependents
1
Registry
npm

Advisories 6

  • CVE-2026-61459Critical 9.3

    MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

    Affected: fixed in 3.9.0.

  • CVE-2026-47250Medium 6.1

    mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration

    Affected: fixed in 3.7.0.

  • mcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer Enforcement

    Affected: fixed in 3.6.0.

  • MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting

    Affected: fixed in 3.5.0.

  • CVE-2025-66404Medium 6.4

    mcp-server-kubernetes potential security issue in exec_in_pod tool

    Affected: fixed in 2.9.8.

  • mcp-server-kubernetes vulnerable to command injection in several tools

    Affected: fixed in 2.5.0.