PyPI/mcp-kubernetes-server CVE-2025-59376: medium 5.3, EPSS 0.30%

mcp-kubernetes-server has a Command Injection vulnerability

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2026-1619
• https://nvd.nist.gov/vuln/detail/CVE-2025-59376
• https://github.com/feiskyer/mcp-kubernetes-server
• https://github.com/feiskyer/mcp-kubernetes-server/blob/78957b6c1a3982080cf6fcaac6f6e9014116a71c/src/mcp_kubernetes_server/main.py#L106-L137
• https://github.com/william31212/CVE-Requests-1896609
• https://pypi.org/project/mcp-kubernetes-server
• https://github.com/advisories/GHSA-hjm5-xgj8-vwj6

CVE-2025-59376 · published 2026-07-07T16:03:05.120447Z · modified 2026-07-07T17:47:03.424682277Z · JSON