https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T17:49:14.740119+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252633 EUVD-2026-252633 2026-10-15T17:49:14.742807+00:00 EUVD-2026-252633 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59377 fkie_cve-2025-59377 2026-10-15T17:49:14.742837+00:00

feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is used. NOTE: this is unrelated to mcp-server-kubernetes and CVE-2025-53355.

 https://cve.radiocsirt.org/vuln/ghsa-4hqq-7q79-932p GHSA-4hqq-7q79-932p — mcp-kubernetes-server has an OS Command Injection vulnerability 2026-10-15T17:49:14.742866+00:00

Affected: PyPI: mcp-kubernetes-server

`feiskyer/mcp-kubernetes-server` through **0.1.11** allows **OS command injection** via the `/mcp/kubectl` endpoint. The handler constructs a shell command with user-supplied arguments and executes it with `subprocess` using `shell=True`, enabling injection through shell metacharacters (e.g., `;`, `&&`, `$()`), even when the server is running in **read-only** mode.

A remote, unauthenticated attacker can execute arbitrary OS commands on the host, resulting in full compromise of confidentiality, integrity, and availability.

This issue is **distinct from** `mcp-server-kubernetes` and from **CVE-2025-53355**.

 https://cve.radiocsirt.org/vuln/pysec-2026-409 PYSEC-2026-409 — mcp-kubernetes-server has an OS Command Injection vulnerability 2026-10-15T17:49:14.742896+00:00

Affected: PyPI: mcp-kubernetes-server

`feiskyer/mcp-kubernetes-server` through **0.1.11** allows **OS command injection** via the `/mcp/kubectl` endpoint. The handler constructs a shell command with user-supplied arguments and executes it with `subprocess` using `shell=True`, enabling injection through shell metacharacters (e.g., `;`, `&&`, `$()`), even when the server is running in **read-only** mode.

A remote, unauthenticated attacker can execute arbitrary OS commands on the host, resulting in full compromise of confidentiality, integrity, and availability.

This issue is **distinct from** `mcp-server-kubernetes` and from **CVE-2025-53355**.