https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T17:53:54.206776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-53355 CVE-2025-53355 — mcp-server-kubernetes vulnerable to command injection in several tools 2026-10-10T17:53:54.222598+00:00

Affected: Flux159 mcp-server-kubernetes

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. A command injection vulnerability exists in the mcp-server-kubernetes MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child_process.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. This vulnerability is fixed in 2.5.0.