Skip to content
Threat Feed
Subscribe

Product

MKP Server

1 brief RSS
medium advisory

MKP Pod Log Read Vulnerability Leads to Memory Exhaustion and Denial of Service

An unauthenticated remote attacker can exploit a vulnerability in the MKP (Model Context Protocol for Kubernetes) server to exhaust its memory and cause a denial of service by sending a crafted `tools/call` request that manipulates `limitBytes` or `tailLines` parameters, leading to unbounded Kubernetes pod log reads into memory.

MKP server kubernetes denial-of-service memory-exhaustion unauthenticated mcp cloud
2t