Description
feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is used. NOTE: this is unrelated to mcp-server-kubernetes and CVE-2025-53355.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| feiskyer | mcp-kubernetes-server | ≤ 0.1.11 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | mcp-kubernetes-server | <= 0.1.11 | — | GHSA-4hqq-7q79-932p |