An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 12 May 2026 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Rohitg00
Rohitg00 kubectl-mcp-server |
|
| Vendors & Products |
Rohitg00
Rohitg00 kubectl-mcp-server |
Tue, 12 May 2026 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Open Source Kubectl MCP Server Arbitrary Code Execution via Crafted HTML Interaction | |
| Weaknesses | CWE-20 CWE-79 |
Tue, 12 May 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-05-12T16:01:56.661Z
Reserved: 2025-11-18T00:00:00.000Z
Link: CVE-2025-65719
No data.
Status : Received
Published: 2026-05-12T17:16:15.140
Modified: 2026-05-12T17:16:15.140
Link: CVE-2025-65719
No data.
OpenCVE Enrichment
Updated: 2026-05-12T19:00:18Z