Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

GHSA-94gr-w3q5-rfqr · CVE-2025-65719 · PYSEC-2026-371 · 갱신 2026. 6. 29.

해야 할 일

kubectl-mcp-server: 1.2.0 이상, kubectl-mcp-server: 1.2.0 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
npm	kubectl-mcp-server	1.2.0
PyPI	kubectl-mcp-server	1.2.0

원문

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-65719
PACKAGEhttps://github.com/rohitg00/kubectl-mcp-server
WEBhttps://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server
WEBhttps://www.ox.security/blog/kubectl-mcp-server-remote-code-execution

오늘 목록으로

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page (GHSA-94gr-w3q5-rfqr) · Sieve