Mcp Kubernetes Server

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:feiskyer:mcp-kubernetes-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFeiskyer (3b6c6e09-7636-5ea0-9bf2-4f58bcb409ab)
ProductMcp Kubernetes Server (bb10b770-c424-594e-a708-e4c31c566c15)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59377 vulnerable 2026-06-08 07:35:21.778206 Details available
LOW (3.7)
feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is used. NOTE: this is unrelated to mcp-server-kubernetes and CVE-2025-53355.
Published: 2025-09-15T00:00:00.000Z
Updated: 2025-09-15T15:10:40.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59376 vulnerable 2026-06-08 07:35:21.777107 Details available
LOW (3.7)
feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e., "version") is not a write or delete operation.
Published: 2025-09-15T00:00:00.000Z
Updated: 2025-09-15T15:10:46.266Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.