Vulnerabilities in Flux159

7 results

Vexday analysis

Flux159 apresenta 7 vulnerabilidades catalogadas, com 1 crítica e nenhuma sob exploração ativa no momento. A ameaça é predominantemente recente, com 4 CVEs divulgadas nos últimos 90 dias, concentrando-se em falhas de validação de argumentos (CWE-88), sugerindo deficiências de entrada em versões recentes do produto.

CVE-2025-53355HIGHmcp-server-kubernetes vulnerable to command injection in several toolsEPSS 2.2%CVE-2025-66404MEDIUMmcp-server-kubernetes potential security issue in exec_in_pod toolEPSS 1.5%CVE-2026-61459CRITICALMCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured ToolsEPSS 0.5%CVE-2026-7594MEDIUMFlux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversalEPSS 0.4%CVE-2026-46519HIGHmcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer EnforcementEPSS 0.4%CVE-2026-47250MEDIUMmcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltrationEPSS 0.3%CVE-2026-39884HIGHMCP Server Kubernetes has Argument Injection in its port_forward tool via space-splittingEPSS 0.3%