The MKP (Model Context Protocol for Kubernetes) server exposes a "get_resource" MCP tool that proxies Kubernetes pod log requests. User-supplied "limitBytes" and "tailLines" parameters are parsed as unbounded "int64" values and forwarded directly to the Kubernetes API. The server then reads the entire returned log stream into an in-memory "bytes.Buffer" using "io.Copy" without any application-side size cap. A remote unauthenticated attacker can exploit this to exhaust the MKP server's memory by sending a single crafted "tools/call" request, leading to process termination (OOM kill) and denial of service. Dynamic reproduction confirmed the MKP process RSS grew from 25.8 MB to 1,179.3 MB (+1,153.4 MB) while handling one request with "limitBytes=134217728".