CVE-2025-59376

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-59376
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-59376.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-59376
Aliases
Published
2025-09-15T14:15:44Z
Modified
2025-09-17T05:20:38.175404Z
Summary
[none]
Details

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e., "version") is not a write or delete operation.

References

Affected packages

Git / github.com/feiskyer/mcp-kubernetes-server

Affected ranges

Type
GIT
Repo
https://github.com/feiskyer/mcp-kubernetes-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

v0.*

v0.1.10
v0.1.11
v0.1.4
v0.1.6
v0.1.7
v0.1.8
v0.1.9