Flux159

Products

ProductCVEsExploitedLatest
mcp-server-kubernetes6–Jul 10, 2026
mcp-game-asset-gen1–May 1, 2026

Exploited and recent CVEs

  • CVE-2026-61459 Critical 9.8 MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools 2.4%
  • CVE-2026-47250 Medium 6.1 mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration 0.4%
  • CVE-2026-46519 High 8.8 mcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer Enforcement 0.5%
  • CVE-2026-7594 High 7.3 Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal 0.4%
  • CVE-2026-39884 High 8.3 MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting 0.3%
  • CVE-2025-66404 Medium 6.4 mcp-server-kubernetes potential security issue in exec_in_pod tool 1.5%
  • CVE-2025-53355 High 7.5 mcp-server-kubernetes vulnerable to command injection in several tools 2.2%