Intel

CVE-2026-61459

mcp-server-kubernetes: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (CVE-2026-61459)

criticalEPSS 2.4%

Affected

  • pypi/mcp-server-kubernetes 0.1.0..*
  • pypi/mcp-server-kubernetes 0.1.1..*
  • pypi/mcp-server-kubernetes 0.1.2..*
  • pypi/mcp-server-kubernetes 0.1.3..*
  • pypi/mcp-server-kubernetes 0.1.6..*

Description

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.

Source: OSV (Open Source Vulnerabilities)cvelistv5NVD (NIST)CVE.org (MITRE)

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

pypimcp-server-kubernetes
0.1.00.1.10.1.20.1.30.1.6

Metrics

XIEM Effective CVSS
9.8
Source: nvd-v3
EPSS percentile
83.3 %
Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
KEV status
—
Show all metrics
Severity
critical
Priority score
130.52
Exploit maturity
no public PoC known
CVSS v3
9.8
CVSS v4
9.3
EPSS score
2.4 %
Moderate — model estimates 1-10% exploitation likelihood.
Published
2026-08-19 11:56 UTC
CWE
CWE-88

Weakness classes (CWE)

  • CWE-88Base

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

    The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

    cwe.mitre.org →

References & sources

Linked advisories