CVE-2026-39884

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior contain an argument injection vulnerability in the port_forward tool in src/tools/port_forward.ts, where a kubectl command is constructed via string concatenation with user-controlled input and then naively split on spaces before being passed to spawn(). Unlike all other tools in the codebase which correctly use array-based argument passing with execFileSync(), port_forward treats every space in user-controlled fields (namespace, resourceType, resourceName, localPort, targetPort) as an argument boundary, allowing an attacker to inject arbitrary kubectl flags. This enables exposure of internal Kubernetes services to the network by injecting --address=0.0.0.0, cross-namespace targeting by injecting additional -n flags, and indirect exploitation via prompt injection against AI agents connected to the MCP server. This issue has been fixed in version 3.5.0.

• CWE-88

• https://github.com/Flux159/mcp-server-kubernetes/releases/tag/v3.5.0Product, Release Notes
• https://github.com/Flux159/mcp-server-kubernetes/security/advisories/GHSA-4xqg-gf5c-ghwqMitigation, Vendor Advisory
• https://github.com/Flux159/mcp-server-kubernetes/security/advisories/GHSA-4xqg-gf5c-ghwqMitigation, Vendor Advisory

Published

Apr 15, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-39879Due to a missing sanitization call in [`afsql_dd_run_query`]…7.1
• CVE-2026-3988GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
• CVE-2026-39880Remnawave Backend is the backend for the Remnawave proxy and…4.9
• CVE-2026-39881Vim is an open source, command line text editor. Prior to 9.…7.8
• CVE-2026-39882OpenTelemetry-Go is the Go implementation of OpenTelemetry. …5.3
• CVE-2026-39883OpenTelemetry-Go is the Go implementation of OpenTelemetry. …7
• CVE-2026-39885FrontMCP is a TypeScript-first framework for the Model Conte…7.5
• CVE-2026-39886OpenEXR provides the specification and reference implementat…5.3
• CVE-2026-39888PraisonAI is a multi-agent teams system. Prior to 1.5.115, e…9.9
• CVE-2026-39889PraisonAI is a multi-agent teams system. Prior to 4.5.115, t…7.5
• CVE-2026-3989SGLangs `replay_request_dump.py` contains an insecure pickle…7.8
• CVE-2026-39890PraisonAI is a multi-agent teams system. Prior to 4.5.115, t…9.8