{"id":"CVE-2026-50125","revision":"fdf807ba42eb495a8fe85bc1b41c391f","records":[{"revision":"fdf807ba42eb495a8fe85bc1b41c391f","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-50125","aliases":[],"title":"MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion","description":"MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpoint and pkg/mcp/server.go registers the unauthenticated get_resource tool, which accepts attacker-controlled limitBytes and tailLines values for the pods logs subresource. buildPodLogOpts() in pkg/k8s/subresource.go parses those values as unbounded int64 parameters, and defaultGetPodLogs() copies the returned Kubernetes log stream through io.Copy into an in-memory bytes.Buffer without an application-side cap. A remote attacker who can reach the default port 8080 MCP endpoint and select a pod with sufficiently large accumulated logs can send one tools/call request that causes large allocations and additional response copies, while the request-frequency limiter does not constrain per-request volume. This can exhaust process memory, terminate the MKP server, and deny the MCP service; observed testing showed more than one GiB of RSS growth while handling a 128 MiB requested stream. This issue is fixed in version 0.4.1.","state":0,"publishedAt":"2026-09-17T19:52:37.55+00:00","modifiedAt":"2026-09-24T20:41:39.599+00:00","affected":[{"ecosystem":"Vendor product","name":"mkp","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"StacklokLabs\",\n                    \"product\": \"mkp\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 0.4.1\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://github.com/StacklokLabs/mkp/security/advisories/GHSA-qw5r-ppcg-f8rj","https://github.com/StacklokLabs/mkp/commit/37bf6bac862aa3b1c71b8aa1b8364eae7818962d"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-50125","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-50125","identifiers":["CVE-2026-50125"]},"retained":false,"historicalAffected":[]}],"coverage":[]}