PyPI/kubectl-mcp-server CVE-2025-65719: critical 9.8, EPSS 0.58%
Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page
Action: Upgrade kubectl-mcp-server to 1.2.0 or later.
pip install kubectl-mcp-server==1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GHSA-94gr-w3q5-rfqr#PyPI/kubectl-mcp-server
- https://nvd.nist.gov/vuln/detail/CVE-2025-65719
- https://github.com/rohitg00/kubectl-mcp-server
- https://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server
- https://www.ox.security/blog/kubectl-mcp-server-remote-code-execution
CVE-2025-65719 · published · modified · JSON