CRITICALCVSS 9.8EPSS 0.6%

CVE-2025-65719

CVE-2025-65719 updated by NVD

Published: 2026-05-12
Modified: 2026-10-28
EPSS percentile: 47%
Sources: github-advisory, nvd

Summary

An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
PyPI	kubectl-mcp-server	—	1.2.0
npm	kubectl-mcp-server	—	1.2.0

Remediation: Upgrade to 1.2.0 or later.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-65719

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.