CVE-2026-61459

Name of the Vulnerable Software and Affected Versions MCP Server Kubernetes versions prior to 3.9.0

Description An argument injection issue exists in the structured tools kubectl get(), kubectl describe(), and kubectl delete(). Improper input validation and argument parsing allow the resourceType and name parameters to bypass the assertNoDangerousFlags security check when they start with leading dashes. This allows an attacker to inject the --server flag, redirecting commands to a malicious API server. Consequently, the operator's bearer token can be transmitted externally, potentially leading to full compromise of the Kubernetes cluster.

Recommendations Update MCP Server Kubernetes to version 3.9.0.