mcp-kubernetes-server vulnerabilities

CVEs whose affected-version data names the mcp-kubernetes-server package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-59376Low· 3.7PoC

1y ago

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e.,…

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e.,…

▾ Twilightfeisky · mcp-kubernetes-serverEPSS 0.30%via NVD