HIGH8.3npm
GHSA-4xqg-gf5c-ghwq· CVE-2026-39884MCP Server Kubernetes has an Argument Injection in port_forward tool via space-splitting
Modified: 4/15/2026
package
npm/mcp-server-kubernetes
pkg:npm/mcp-server-kubernetes
MEDIUM6.1npm
GHSA-6mx4-4h42-r8vh· CVE-2026-47250MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration
Modified: 6/12/2026
HIGH8.8npm
GHSA-cr22-wjx7-2w6m· CVE-2026-46519MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement
Modified: 6/12/2026
HIGH7.5npm
GHSA-gjv4-ghm7-q58q· CVE-2025-53355MCP Server Kubernetes vulnerable to command injection in several tools
Modified: 2/4/2026
MEDIUM6.4npm
GHSA-wvxp-jp4w-w8wg· CVE-2025-66404mcp-server-kubernetes has potential security issue in exec_in_pod tool
Modified: 12/5/2025