{"data":{"id":"9a129274-1a6e-4e3b-b9f2-e543dd4fb062","title":"CVE-2026-39884: mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior…","summary":"mcp-server-kubernetes, a Model Context Protocol server for Kubernetes cluster management, versions 3.4.0 and prior, contains an argument injection flaw (CVE-2026-39884) in the port_forward tool in src/tools/port_forward.ts. The tool builds a kubectl command by string concatenation and splits it on spaces before calling spawn(), so spaces in namespace, resourceType, resourceName, localPort and targetPort become argument boundaries. An attacker can inject arbitrary kubectl flags, such as --address=0.0.0.0 to expose internal Kubernetes services to the network or additional -n flags to target other namespaces, including through prompt injection against connected AI agents.","solution":"Fixed in 3.5.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-39884","publishedAt":"2026-04-15T04:17:37.097Z","cveId":"CVE-2026-39884","cweIds":["CWE-88"],"cvssScore":"8.3","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["mcp-server-kubernetes@<= 3.4.0 (fixed: 3.5.0)"],"affectedPackageNames":["mcp-server-kubernetes"],"affectedPackageRefs":["npm:mcp-server-kubernetes"],"affectedVendors":[],"affectedVendorsRaw":["mcp-server-kubernetes","Model Context Protocol"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"mcp-server-kubernetes argument injection in port_forward tool","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00416,"epssCheckedAt":"2026-10-15T06:09:22.429Z","kevDateAdded":null,"advisoryAliases":["GHSA-4xqg-gf5c-ghwq"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:29.322Z","patchAvailable":true,"disclosureDate":"2026-04-15T04:17:37.097Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"]}}