An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.
History

Tue, 12 May 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Rohitg00
Rohitg00 kubectl-mcp-server
Vendors & Products Rohitg00
Rohitg00 kubectl-mcp-server

Tue, 12 May 2026 18:00:00 +0000

Type Values Removed Values Added
Title Open Source Kubectl MCP Server Arbitrary Code Execution via Crafted HTML Interaction
Weaknesses CWE-20
CWE-79

Tue, 12 May 2026 16:45:00 +0000

Type Values Removed Values Added
Description An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-05-12T16:01:56.661Z

Reserved: 2025-11-18T00:00:00.000Z

Link: CVE-2025-65719

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-05-12T17:16:15.140

Modified: 2026-05-12T17:16:15.140

Link: CVE-2025-65719

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-12T19:00:18Z