Detections
Analytics

SCA: security update for mcp-server-kubernetes (GHSA-cr22-wjx7-2w6m)

high Tenable Cloud Security Plugin ID 442299

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to
 version 3.6.0, mcp-server-kubernetes exposes three environment variables (ALLOW_ONLY_READONLY_TOOLS,
 ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS, ALLOWED_TOOLS) documented as access controls for restricting which
 Kubernetes operations are available. These controls are enforced at the tool discovery layer (tools/list)
 but not at the execution layer (tools/call). Any client that knows a tool name can invoke it directly
 regardless of the configured restriction mode. The access control was effectively cosmetic. This issue has
 been patched in version 3.6.0. (CVE-2026-46519)

Solution

Update the mcp-server-kubernetes library and its related packages to version 3.6.0 or later.

See Also

https://github.com/advisories/GHSA-cr22-wjx7-2w6m

Plugin Details

Severity: High

ID: 442299

Version: Revision 1.8

Type: Local

Family: SCA Checks

Published: 5/22/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.87

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-46519

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 5/21/2026

Vulnerability Publication Date: 5/21/2026

Reference Information

CVE: CVE-2026-46519

cwe: CWE-863