PT-2026-57272 · Unknown · Mcp-Server-Kubernetes

George Chen · Published 2026-07-10 · Updated 2026-07-10 · CVE-2026-61459

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MCP Server Kubernetes versions prior to 3.9.0

Description An argument injection flaw exists in structured tools, specifically within the kubectl get, kubectl describe, and kubectl delete functions. By providing the resourceType and name parameters with leading dashes, an attacker can bypass the assertNoDangerousFlags security check. This allows the injection of the --server flag to redirect commands to an external API server controlled by the attacker, which can lead to the transmission of the operator's bearer token and full cluster compromise.

Recommendations Update MCP Server Kubernetes to version 3.9.0 or later. As a temporary mitigation, restrict the use of the kubectl get, kubectl describe, and kubectl delete functions.

Exploit

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2026-61459

Affected Products

Mcp-Server-Kubernetes

References · 9

• 🔥 https://github.com/Flux159/mcp-server-kubernetes/issues/328 · Exploit
• https://github.com/Flux159/mcp-server-kubernetes/commit/d7890f50a4567bf5d9842541ba6f41e180227f9a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-61459 · Security Note
• https://github.com/Flux159/mcp-server-kubernetes/releases/tag/3.9.0 · Note
• https://github.com/Flux159/mcp-server-kubernetes/pull/329 · Note
• https://twitter.com/infoflowcloud/status/2075667870634193110 · Twitter Post
• https://vulncheck.com/advisories/mcp-server-kubernetes-argument-injection-via-kubectl-structured-tools · Note
• https://twitter.com/CVEnew/status/2075666968921649605 · Twitter Post
• https://twitter.com/OrizonCyber/status/2075678961477075224 · Twitter Post