An open source component of Kubectl MCP Server, specifically version 1.1.1, contains a flaw that permits an attacker to run arbitrary code on a system when a user interacts with a specially crafted HTML page. The vulnerability involves code injection (CWE‑94), allowing malicious content to be executed with the privileges of the executable, potentially giving attackers full control over the host.

The affected product is Kubectl MCP Server version 1.1.1. No vendor or product name is associated in the CNA data, indicating that the tool is maintained by an open source community.

The attack vector involves user interaction with a malicious web page, suggesting that the flaw is exploitable by a user who visits or otherwise renders the crafted content. EPSS score is <1% and the issue is not listed in CISA’s KEV catalog, but the presence of remote code execution grants a critical severity with a CVSS score of 9.8. In the absence of public exploit evidence, the likelihood of an ongoing attack remains uncertain; nevertheless, the potential impact is severe enough to warrant rapid response.