CRITICAL 9.8

GHSA-wmg3-h8mf-wgvr

mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials

Quick fix

GHSA-wmg3-h8mf-wgvr — mcp-server-kubernetes: upgrade to the fixed version with the command below.

pip install --upgrade 'mcp-server-kubernetes>=3.9.0'

Details

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / mcp-server-kubernetes

Introduced in: 0 Fixed in: 3.9.0

Fix pip install --upgrade 'mcp-server-kubernetes>=3.9.0'

References

https://nvd.nist.gov/vuln/detail/CVE-2026-61459 [ADVISORY]
https://github.com/Flux159/mcp-server-kubernetes/issues/328 [WEB]
https://github.com/Flux159/mcp-server-kubernetes/pull/329 [WEB]
https://github.com/Flux159/mcp-server-kubernetes/commit/d7890f50a4567bf5d9842541ba6f41e180227f9a [WEB]
https://github.com/Flux159/mcp-server-kubernetes [PACKAGE]
https://github.com/Flux159/mcp-server-kubernetes/releases/tag/3.9.0 [WEB]
https://www.vulncheck.com/advisories/mcp-server-kubernetes-argument-injection-via-kubectl-structured-tools [WEB]