GitHub Advisoryadvisory · npm

GHSA-wmg3-h8mf-wgvr mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials

CRITICAL Published 2026-07-10 Modified 2026-10-28 Official page ↗
Aliases
CVE-2026-61459
Ecosystem
npm
Packages
mcp-server-kubernetes
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-88
Reviewed
2026-08-12

Affected packages

• npm mcp-server-kubernetes: < 3.9.0 → fixed in 3.9.0

Description

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.

Related

Alias · CVE (1)

  • CVE-2026-61459 MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe,… vulnerability

Weakness · CWE (1)

  • CWE-88 Improper Neutralization of Argument Delimiters in a Command weakness

References