feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e., "version") is not a write or delete operation.
References
| Link | Resource |
|---|---|
| https://github.com/feiskyer/mcp-kubernetes-server/blob/78957b6c1a3982080cf6fcaac6f6e9014116a71c/src/mcp_kubernetes_server/main.py#L106-L137 | Product |
| https://github.com/william31212/CVE-Requests-1896609 | Third Party Advisory |
| https://github.com/william31212/CVE-Requests-1896609 | Third Party Advisory |
Configurations
History
20 Sep 2025, 02:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:feisky:mcp-kubernetes-server:*:*:*:*:*:*:*:* | |
| First Time |
Feisky mcp-kubernetes-server
Feisky |
|
| CWE | CWE-863 | |
| References | () https://github.com/feiskyer/mcp-kubernetes-server/blob/78957b6c1a3982080cf6fcaac6f6e9014116a71c/src/mcp_kubernetes_server/main.py#L106-L137 - Product | |
| References | () https://github.com/william31212/CVE-Requests-1896609 - Third Party Advisory |
15 Sep 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/william31212/CVE-Requests-1896609 - |
15 Sep 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-15 14:15
Updated : 2025-09-20 02:51
NVD link : CVE-2025-59376
Mitre link : CVE-2025-59376
CVE.ORG link : CVE-2025-59376
JSON object : View
Products Affected
feisky
- mcp-kubernetes-server