CVE-2025-65719

critical · 9.8

An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.

9.8

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2026-05-12

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-94

References

https://github.com/rohitg00/kubectl-mcp-server
https://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server/
https://www.ox.security/blog/kubectl-mcp-server-remote-code-execution

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-65719