Skip to content
OpenAdvisories

Vendor

Flux159

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-61459 Public exploit

    MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

    MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name pa…