Skip to content
OpenAdvisories

Vendor

Flux159

7 known vulnerabilities.

Products

mcp-server-kubernetes 6 mcp-game-asset-gen 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-47250

    mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration

    mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the kubectl_generic tool in mcp-server-kubernetes passes user-supplied flags directly to kubectl without any allowlist, enabling a privilege es…

    Flux159 mcp-server-kubernetes mcp-server-kubernetes npm
  • Medium 6.4
    CVE-2025-66404

    mcp-server-kubernetes potential security issue in exec_in_pod tool

    MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both ar…

    Flux159 mcp-server-kubernetes mcp-server-kubernetes npm