An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.

Project Subscriptions

Vendors Products
Rohitg00 Subscribe
Kubectl-mcp-server Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 12 May 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Rohitg00
Rohitg00 kubectl-mcp-server
Vendors & Products Rohitg00
Rohitg00 kubectl-mcp-server

Tue, 12 May 2026 18:00:00 +0000

Type Values Removed Values Added
Title Open Source Kubectl MCP Server Arbitrary Code Execution via Crafted HTML Interaction
Weaknesses CWE-20
CWE-79

Tue, 12 May 2026 16:45:00 +0000

Type Values Removed Values Added
Description An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-05-12T16:01:56.661Z

Reserved: 2025-11-18T00:00:00.000Z

Link: CVE-2025-65719

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-05-12T17:16:15.140

Modified: 2026-05-12T17:16:15.140

Link: CVE-2025-65719

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-12T19:00:18Z

Weaknesses