Microsoft MCP Gateway advisory: Kubernetes name collisions and tool takeover

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsMicrosoft advisory published: Microsoft MCP Gateway fixed name-collision ownership confusion in v1.0.0; its advisory warns that upgrading does not reverse changes already made to an existing gateway workload.

  GHSA-frpg-5vp2-p974: Affected versions, Patches, and Checking for past abuse

• supportsMicrosoft advisory published: The advisory documents resource-name ownership confusion between MCP tenants after a Kubernetes name collision.

  GHSA-frpg-5vp2-p974: Description and ownership bypass

• supportsMicrosoft advisory published: The reserved toolgateway collision can affect a privileged built-in workload; the disclosed chain requires an authenticated resource creator and does not document field exploitation.

  GHSA: toolgateway and built-in service account impact