VulnSocial

CVE-2026-39884Disclosure(suyogs / mcp-server-kubernetes)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch suyogs mcp-server-kubernetes systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior contain an argument injection vulnerability in the port_forward tool in src/tools/port_forward.ts, where a kubectl command is constructed via string concatenation with user-controlled input and then naively split on spaces before being passed to spawn(). Unlike all other tools in the codebase which correctly use array-based argument passing with execFileSync(), port_forward treats every space in user-controlled fields (namespace, resourceType, resourceName, localPort, targetPort) as an argument boundary, allowing an attacker to inject arbitrary kubectl flags. This enables exposure of internal Kubernetes services to the network by injecting --address=0.0.0.0, cross-namespace targeting by injecting additional -n flags, and indirect exploitation via prompt injection against AI agents connected to the MCP server. This issue has been fixed in version 3.5.0.

suyogs CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-88

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mcp-server-kubernetes

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-04-15); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
suyogs
Products
mcp-server-kubernetes

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-15: 2Mentions · 2026-04-25: 1Patch / Workaround · 2026-04-25: 1Technical Details · 2026-04-15: 2Technical Details · 2026-04-25: 104-1504-25
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-04-152
Disclosure2
2026-04-251
Patch1
Full discourse3 posts
  • Sattyam Jain@Sattyamjjain
    Patch

    Shipping in agent-airlock v0.5.6 today: — bind_address_guard (rejects 0.0.0.0 dev-mode MCP servers without auth — covers CVE-2026-23744) — argv_guard (catches kubectl-flag injection from CVE-2026-39884) — Claude Managed Agents audit hook for managed-agents-2026-04-01

    Post summary

    The agent-airlock v0.5.6 release includes guards that patch CVE-2026-23744 (unauthenticated dev‑mode server access) and CVE-2026-39884 (kubectl‑flag injection), providing mitigation for these vulnerabilities.

    1000039
    66 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-39884 mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior contain an argument injection vulnerability in th… https://www.cve.org/CVERecord?id=CVE-2026-39884

    Post summary

    This brief excerpt announces a newly identified argument injection vulnerability in mcp-server-kubernetes, with versions 3.4.0 and earlier affected, but it lacks details on exploitation, patches, or PoCs.

    0000074
    57.2K followersView on X
  • PulsePatch.io@pulsepatchio
    Disclosure

    An argument injection vulnerability (CVE-2026-39884) affects the 'port_forward' tool in MCP Server Kubernetes. This flaw could lead to unauthorized command execution. Organizations should assess exposure. #Kubernetes #Infosec #CVE https://www.pulsepatch.io/posts/cve-2026-39884-mcp-server-kubernetes-argument-injection

    Post summary

    The post announces an argument injection vulnerability (CVE‑2026‑39884) in MCP Server’s port_forward tool, detailing the potential for command execution but providing no PoC, exploitation tools, or patch information.

    0000033
    12 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsuyogsmcp-server-kubernetes-node.js-

Explore more

Back to dashboardsuyogs CVEsmcp-server-kubernetes vulnerabilities