{"data":{"id":"12a92056-3150-44a5-a240-818b8eb7a24c","title":"GHSA-6mx4-4h42-r8vh: MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration","summary":"The kubectl_generic tool in mcp-server-kubernetes passes user-supplied flags and args straight to kubectl with no allowlist. An attacker with limited access can plant a JSON log line that an AI agent follows, causing kubectl to send the operator's Authorization: Bearer token to an attacker endpoint via --server and --insecure-skip-tls-verify=true. The captured token can then be replayed against the real Kubernetes API server, granting the operator's service account RBAC permissions.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-6mx4-4h42-r8vh","publishedAt":"2026-06-05T15:40:00.000Z","cveId":"CVE-2026-47250","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["mcp-server-kubernetes@<= 3.6.2 (fixed: 3.7.0)"],"affectedPackageNames":["mcp-server-kubernetes"],"affectedPackageRefs":["npm:mcp-server-kubernetes"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["mcp-server-kubernetes","MCP server","Claude Haiku"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00423,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-6mx4-4h42-r8vh"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-05T15:40:00.000Z","fixReleasedAt":"2026-05-20T19:45:02.262Z","daysToFix":-16,"fixCheckedAt":"2026-10-29T21:34:58.077Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"mcp-server-kubernetes","fixedVersion":"3.7.0","matchedVersion":"3.7.0","fixReleasedAt":"2026-05-20T19:45:02.262Z","daysToFix":-16,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:57.930Z"}]}}