Name of the Vulnerable Software and Affected Versions MCP Server Kubernetes versions prior to 3.9.0

Description An argument injection issue exists in structured tools including the functions kubectl get(), kubectl describe(), and kubectl delete(). By providing the resourceType and name parameters with leading dashes, an attacker can bypass the assertNoDangerousFlags security check. This allows the injection of the --server flag to redirect commands to an external API server, which can lead to the transmission of the operator's bearer token and full cluster compromise.

Recommendations Update to version 3.9.0 or later. Restrict the use of the resourceType and name parameters in the kubectl get(), kubectl describe(), and kubectl delete() functions to prevent the use of leading dashes.