CVE-2025-65719: Open Source Kubectl MCP Server remote code execution via code injection

Executive brief

The Kubectl MCP Server, a tool used to interface with Kubernetes clusters, is vulnerable to a critical security flaw. An attacker can execute malicious code on a user's system if the user interacts with a specially crafted web page. This could lead to a full system takeover, unauthorized access to sensitive cluster data, and disruption of operations.

Technical details

A code injection vulnerability (CWE-94) exists in Kubectl MCP Server versions prior to 1.2.0. The vulnerability allows for arbitrary code execution on the victim's system. While the advisory description mentions user interaction with a crafted HTML page, the provided CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N) suggests a high-severity network-based attack. The root cause involves improper neutralization of externally-influenced input used to construct code segments. The issue is patched in version 1.2.0 for both npm and pip distributions.

Affected products

• Open Source Kubectl MCP Server kubectl-mcp-server < 1.2.0

Timeline

• 2026-05-12: disclosed
• 2026-05-12: advisory
• 2026-06-18: patched: Advisory updated with patch information

References

• https://api.github.com/users/vinodkone
• https://github.com/vinodkone
• https://api.github.com/users/vinodkone/gists%7B/gist_id%7D
• https://api.github.com/users/vinodkone/repos
• https://avatars.githubusercontent.com/u/48131?v=4
• https://api.github.com/users/vinodkone/events%7B/privacy%7D