Live › vulnerability › CVE-2025-65719
Go to dashboardThe kubectl-mcp-server MCP server, published on npm and PyPI, can be made to execute arbitrary code on a victim's system when that user opens a crafted HTML page. The sources describe the attacker gaining code execution with the victim's privileges, which can include access to their Kubernetes credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC, 0h before NVD. All times on this page are UTC.
Teams running kubectl-mcp-server before 1.2.0 from npm or PyPI, most likely on a developer machine where the server is reachable by a browser the user also uses. The sources do not describe the exact configuration needed to reach the flaw, so a host that does not run the server can skip it. Teams already on 1.2.0 or later are not affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| kubectl-mcp-server | npm | < 1.2.0 | 1.2.0 |
| kubectl-mcp-server | pypi | < 1.2.0 | 1.2.0 |
npm ls kubectl-mcp-server or pip show kubectl-mcp-server and compare the version to 1.2.0kubectl-mcp-server to 1.2.0 or laterkubectl-mcp-server to 1.2.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.
This page as .md · .json · in your agent: get_signal("CVE-2025-65719")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.