Skip to content

Hide Navigation Hide TOC

mcp-server-kubernetes Command Injection in kubectl_scale / kubectl_patch / explain_resource (CVE-2025-53355) - ATR-2026-01927 (5b0036ca-fe8c-548b-9608-6c526ab2325c)

GitHub Security Advisory GHSA-gjv4-ghm7-q58q (CVE-2025-53355). The mcp-server-kubernetes package (<= 2.4.9) passes unsanitized tool parameters to execSync inside the kubectl_scale, kubectl_patch and explain_resource MCP tools. Shell metacharacters (; | && $() backticks) in those parameters allow arbitrary command execution on the host with the server's Kubernetes admin credentials. CWE-78, CVSS 7.5.

Cluster A Galaxy A Cluster B Galaxy B Level
Indirect (a4a55526-2f1f-403b-9691-609e46381e17) MITRE ATLAS Attack Pattern mcp-server-kubernetes Command Injection in kubectl_scale / kubectl_patch / explain_resource (CVE-2025-53355) - ATR-2026-01927 (5b0036ca-fe8c-548b-9608-6c526ab2325c) Agent Threat Rules 1
LLM Plugin Compromise (adbb0dd5-ff66-4b2f-869f-bfb3fdb45fc8) MITRE ATLAS Attack Pattern mcp-server-kubernetes Command Injection in kubectl_scale / kubectl_patch / explain_resource (CVE-2025-53355) - ATR-2026-01927 (5b0036ca-fe8c-548b-9608-6c526ab2325c) Agent Threat Rules 1
Indirect (a4a55526-2f1f-403b-9691-609e46381e17) MITRE ATLAS Attack Pattern LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern 2