The vulnerability in Flux159 mcp-server-kubernetes before version 3.9.0 involves improper neutralization of argument delimiters in command-line parameters used by structured tools such as kubectl_get, kubectl_describe, and kubectl_delete. Attackers can supply resourceType and name parameters starting with dashes to bypass the assertNoDangerousFlags security check. This allows injection of the --server flag, redirecting kubectl commands to an attacker-controlled API server. Consequently, the operator's bearer token is transmitted to the attacker, enabling full compromise of the Kubernetes cluster.

Successful exploitation results in disclosure of the operator's bearer token to an attacker-controlled API server. This token exposure allows the attacker to gain full control over the Kubernetes cluster, representing a critical security breach with high confidentiality, integrity, and availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is documented at this time. Until a patch is available, avoid using affected versions of mcp-server-kubernetes or restrict access to the vulnerable tools to trusted users only.