Search vulnerabilities

Results 2

CVE-2025-69902

A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
CVE-2025-65719

Remote Code Execution via Crafted HTML in Kubectl MCP Server v1.1.1

An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors