CVE-2025-53355: high-severity vulnerability in Flux159 mcp-server-kubernetes
mcp-server-kubernetes vulnerable to command injection in several tools
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 2.2%
MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. A command injection vulnerability exists in the mcp-server-kubernetes MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child_process.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. This vulnerability is fixed in 2.5.0.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Flux159 · mcp-server-kubernetesRelated CVEs — Flux159 mcp-server-kubernetes
In the same product, most dangerous first.
CVE-2026-61459CRITICALMCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured ToolsEPSS 2.4%CVE-2025-66404MEDIUMmcp-server-kubernetes potential security issue in exec_in_pod toolEPSS 1.5%CVE-2026-46519HIGHmcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer EnforcementEPSS 0.5%CVE-2026-47250MEDIUMmcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltrationEPSS 0.4%CVE-2026-39884HIGHMCP Server Kubernetes has Argument Injection in its port_forward tool via space-splittingEPSS 0.3%