CVE-2026-61459

9.8

CRITICAL CVSS 3.1

MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

Overview

Description

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.

Details

INFO

Published Date :

July 10, 2026, 7:17 p.m.

Last Modified :

July 17, 2026, 12:27 p.m.

Remotely Exploit :

Yes !

Source :

[email protected]

Impact

Affected Products

The following products are affected by CVE-2026-61459 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product	Action
1	Suyogs	mcp-server-kubernetes

: Total Affected Vendor : 1 | Products : 1

Scoring

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.

Version	Severity	Source
CVSS		134c704f-9b21-4f2e-91b3-4a467353bcc0
CVSS 3.1	CRITICAL	83251b91-4cc7-4094-a5c7-464a1b83ea10
CVSS 3.1	CRITICAL	[email protected]
CVSS 4.0	CRITICAL	83251b91-4cc7-4094-a5c7-464a1b83ea10
CVSS 4.0	CRITICAL	[email protected]

Solution

Update MCP Server Kubernetes to version 3.9.0 or later to fix argument injection.

Update MCP Server Kubernetes to version 3.9.0 or later.
Review and secure kubectl command usage.
Monitor for suspicious API server connections.

Public PoC/Exploit Available at Github

CVE-2026-61459 has a 3 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

References

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2026-61459.

URL	Resource
https://github.com/Flux159/mcp-server-kubernetes/commit/d7890f50a4567bf5d9842541ba6f41e180227f9a	Patch
https://github.com/Flux159/mcp-server-kubernetes/issues/328	Issue Tracking Exploit Mitigation Vendor Advisory
https://github.com/Flux159/mcp-server-kubernetes/pull/329	Issue Tracking Patch
https://github.com/Flux159/mcp-server-kubernetes/releases/tag/3.9.0	Release Notes
https://www.vulncheck.com/advisories/mcp-server-kubernetes-argument-injection-via-kubectl-structured-tools	Third Party Advisory

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-61459 is associated with the following CWEs:

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-61459 weaknesses.

CAPEC-41: Using Meta-characters in E-mail Headers to Inject Malicious Payloads Using Meta-characters in E-mail Headers to Inject Malicious Payloads CAPEC-88: OS Command Injection OS Command Injection CAPEC-137: Parameter Injection Parameter Injection CAPEC-174: Flash Parameter Injection Flash Parameter Injection CAPEC-460: HTTP Parameter Pollution (HPP) HTTP Parameter Pollution (HPP)

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

mcp-security-project/mcp-cve-project

The Project shares all information on MCP related CVE's published

mcp mcp-security mcp-cve

Updated: 1 week, 6 days ago

19 stars 4 fork 4 watcher

Born at : May 7, 2026, 3:47 p.m. This repo has been linked 307 different CVEs too.

sattyamjjain/agent-audit-kit

Static scanner for MCP-connected AI agent pipelines — 225 rules across 11 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.

ai-agent ai-security claude-code github-action mcp mcp-security owasp sarif scanner security supply-chain-security tool-poisoning ai-agent-security ai-safety security-scanner static-analysis

Python Dockerfile Shell TypeScript HTML Makefile

Updated: 1 week, 4 days ago

10 stars 0 fork 0 watcher

Born at : April 5, 2026, 3:12 p.m. This repo has been linked 35 different CVEs too.

tanjiti/sec_profile

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

Python HTML

Updated: 1 week, 5 days ago

1582 stars 255 fork 255 watcher

Born at : Feb. 19, 2019, 10:24 a.m. This repo has been linked 10 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-61459 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2026-61459 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

Initial Analysis by [email protected]

Jul. 17, 2026

Action	Type	New Value
Added	CPE Configuration	OR cpe:2.3:a:suyogs:mcp-server-kubernetes::::::node.js:: versions up to (excluding) 3.9.0
Added	Reference Type	VulnCheck: https://github.com/Flux159/mcp-server-kubernetes/commit/d7890f50a4567bf5d9842541ba6f41e180227f9a Types: Patch
Added	Reference Type	VulnCheck: https://github.com/Flux159/mcp-server-kubernetes/issues/328 Types: Exploit, Issue Tracking, Mitigation, Vendor Advisory
Added	Reference Type	VulnCheck: https://github.com/Flux159/mcp-server-kubernetes/pull/329 Types: Issue Tracking, Patch
Added	Reference Type	VulnCheck: https://github.com/Flux159/mcp-server-kubernetes/releases/tag/3.9.0 Types: Release Notes
Added	Reference Type	VulnCheck: https://www.vulncheck.com/advisories/mcp-server-kubernetes-argument-injection-via-kubectl-structured-tools Types: Third Party Advisory

CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0

Jul. 13, 2026

Action	Type	Old Value	New Value
Added	SSVC		{'id': 'CVE-2026-61459', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'poc'}, {'automatable': 'yes'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2026-07-13T14:55:05.825674Z'}

New CVE Received by [email protected]

Jul. 10, 2026

Action	Type	New Value
Added	Affected	[{'repo': 'https://github.com/Flux159/mcp-server-kubernetes', 'vendor': 'Flux159', 'product': 'mcp-server-kubernetes', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '3.9.0', 'versionType': 'semver'}], 'packageURL': 'pkg:npm/mcp-server-kubernetes', 'defaultStatus': 'unaffected'}]
Added	Description	MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.
Added	CVSS V4.0	AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Added	CVSS V3.1	AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added	CWE	CWE-88
Added	Reference	https://github.com/Flux159/mcp-server-kubernetes/commit/d7890f50a4567bf5d9842541ba6f41e180227f9a
Added	Reference	https://github.com/Flux159/mcp-server-kubernetes/issues/328
Added	Reference	https://github.com/Flux159/mcp-server-kubernetes/pull/329
Added	Reference	https://github.com/Flux159/mcp-server-kubernetes/releases/tag/3.9.0
Added	Reference	https://www.vulncheck.com/advisories/mcp-server-kubernetes-argument-injection-via-kubectl-structured-tools

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.