Unencrypted Bearer Token Transmission over Cleartext HTTP on Redirect or Unvalidated Target URLs (containers/kubernetes-mcp-server)

0x01 // Advisory Summary

containers/kubernetes-mcp-server (0.1.0 - 0.1.1) forwarded sensitive bearer credentials without enforcing HTTPS transport schemes across outbound cluster/provider requests and redirects, exposing tokens over cleartext HTTP (CWE-319 / CWE-918).

0x02 // Affected Versions & Remediation

• Repository: containers/kubernetes-mcp-server
• Affected Versions: >= 0.1.0, <= 0.1.1
• Patched Versions: 0.1.2
• CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
• Reporter Credit: Serhii Shunko (@ccsimplyspolit)

0x03 // Canonical Verification Links

• Official GitHub Security Advisory: https://github.com/containers/kubernetes-mcp-server/security/advisories/GHSA-xq9m-mrj7-jv98
• Reporter Profile: https://github.com/ccsimplyspolit