CVE-2026-61459CWE-88

MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

Critical · published July 10, 2026

CVSS v4.0
9.3
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.02362 · 83.6th percentile
Weakness
CWE-88 · Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Published
2026-07-10T18:34Z
EPSS history
Timeline
  • 10 JUL 18:34Z
    MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools
    cvelistv5