tocsin

CVE-2025-65719

3 advisories.

npm/kubectl-mcp-server CVE-2025-65719: critical 9.8

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

Action: Upgrade kubectl-mcp-server to 1.2.0 or later.

npm i kubectl-mcp-server@1.2.0

Affected

introducedfixedlast affected
01.2.0-

Fixed versions

1.2.0

Sources

CVE-2025-65719 · published · modified · JSON

PyPI/kubectl-mcp-server CVE-2025-65719: critical 9.8

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

Action: Upgrade kubectl-mcp-server to 1.2.0 or later.

pip install kubectl-mcp-server==1.2.0

Affected

introducedfixedlast affected
01.2.0-

Fixed versions

1.2.0

Sources

CVE-2025-65719 · published · modified · JSON

PyPI/kubectl-mcp-server CVE-2025-65719: critical 9.8

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

Action: Upgrade kubectl-mcp-server to 1.2.0 or later.

pip install kubectl-mcp-server==1.2.0

Affected

introducedfixedlast affected
01.2.0-

Fixed versions

1.2.0

Sources

CVE-2025-65719 · published · modified · JSON