CVE-2026-61459 Details
Description
MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.
An argument injection vulnerability has been identified in MCP Server Kubernetes versions prior to 3.9.0. This vulnerability exists within structured tools such as kubectl_get, kubectl_describe, and kubectl_delete. It allows attackers to bypass the security check that prevents the use of dangerous flags by adding leading dashes to the resourceType and name parameters. Exploiting this vulnerability enables attackers to inject the --server flag, redirecting kubectl commands to an API server controlled by the attacker. As a result, the operator's bearer token is leaked, potentially leading to a complete compromise of the Kubernetes cluster.
Users can update to MCP Server Kubernetes version 3.9.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Flux159/mcp-server-kubernetes/commit/d7890f50a4567bf5d9842541ba6f41e180227f9a | [email protected] | Patch |
| https://github.com/Flux159/mcp-server-kubernetes/issues/328 | [email protected] | Issue TrackingExploitMitigationVendor Advisory |
| https://github.com/Flux159/mcp-server-kubernetes/pull/329 | [email protected] | Issue TrackingPatch |
| https://github.com/Flux159/mcp-server-kubernetes/releases/tag/3.9.0 | [email protected] | Release Notes |
| https://www.vulncheck.com/advisories/mcp-server-kubernetes-argument-injection-via-kubectl-structured-tools | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-88 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| suyogs mcp-server-kubernetes | < 3.9.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 17, 2026 | Initial Analysis | [email protected] |
| Jul 13, 2026 | CVE Modified | CISA-ADP |
| Jul 10, 2026 | New CVE Received | [email protected] |