CVE-2025-53355
1 advisory.
npm/mcp-server-kubernetes CVE-2025-53355: high 7.5
MCP Server Kubernetes vulnerable to command injection in several tools
Action: Upgrade mcp-server-kubernetes to 2.5.0 or later.
npm i mcp-server-kubernetes@2.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.0 | - |
Fixed versions
| 2.5.0 |
Sources
- osv: GHSA-gjv4-ghm7-q58q
- https://github.com/Flux159/mcp-server-kubernetes/security/advisories/GHSA-gjv4-ghm7-q58q
- https://nvd.nist.gov/vuln/detail/CVE-2025-53355
- https://github.com/Flux159/mcp-server-kubernetes/commit/ab165f5a0eea917fef5dbae954506fff6f4bf514
- https://github.com/cyanheads/git-mcp-server/commit/0dbd6995ccdf76ab770b58013034365b2d06c4d9
- https://equixly.com/blog/2025/03/29/mcp-server-new-security-nightmare
- https://github.com/Flux159/mcp-server-kubernetes
- https://invariantlabs.ai/blog/mcp-github-vulnerability
CVE-2025-53355 · published · modified · JSON