{"id":"EUVD-2025-209796","enisaUuid":"8efda8a3-d3b0-3ddd-bad0-eb49b028035e","description":"An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.","datePublished":"May 12, 2026, 12:00:00 AM","dateUpdated":"May 13, 2026, 2:12:16 PM","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/rohitg00/kubectl-mcp-server\nhttps://www.ox.security/blog/kubectl-mcp-server-remote-code-execution\nhttps://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server/\n","aliases":"CVE-2025-65719\n","assigner":"mitre","epss":0.58,"enisaIdProduct":[{"id":"c84ba174-8179-311d-9a1a-502bf7cb0fa5","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"93666849-d89b-319d-b8eb-b17793d3dbec","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"281a2b12-5cfd-3ac1-a01a-9665c0fbfa46","vulnerability":{"id":"CVE-2025-65719","description":"An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.","datePublished":"May 12, 2026, 12:00:00 AM","dateUpdated":"May 13, 2026, 2:12:16 PM","status":"PUBLISHED","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/rohitg00/kubectl-mcp-server\nhttps://www.ox.security/blog/kubectl-mcp-server-remote-code-execution\nhttps://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server/\n","enisa_id":"EUVD-2025-209796\n","assigner":"mitre","epss":0.58,"dataProcessed":"Oct 29, 2026, 7:19:45 AM","vulnerabilityProduct":[{"id":"bf99a754-4cdf-37fc-9707-c055b5f6e667","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"a32aca42-0d7f-35fe-ac4f-f0df3c7a52aa","vendor":{"name":"n/a"}}]}},{"id":"45c991db-bdba-303b-99fb-cdb5ca8815c8","vulnerability":{"id":"PYSEC-2026-371","description":"Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page","datePublished":"Jun 29, 2026, 11:50:48 AM","dateUpdated":"Jul 1, 2026, 8:22:55 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-65719\nhttps://github.com/rohitg00/kubectl-mcp-server\nhttps://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server\nhttps://www.ox.security/blog/kubectl-mcp-server-remote-code-execution\nhttps://pypi.org/project/kubectl-mcp-server\nhttps://github.com/advisories/GHSA-94gr-w3q5-rfqr\n","enisa_id":"EUVD-2025-209796\n","aliases":"CVE-2025-65719\nGHSA-94gr-w3q5-rfqr\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:06:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"aeb6aec2-50f1-32cd-b655-a531bb6b55b7","vulnerability":{"id":"GHSA-94gr-w3q5-rfqr","description":"Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page","datePublished":"May 12, 2026, 6:30:38 PM","dateUpdated":"Oct 27, 2026, 5:27:44 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-65719\nhttps://github.com/pypa/advisory-database/tree/main/vulns/kubectl-mcp-server/PYSEC-2026-371.yaml\nhttps://github.com/rohitg00/kubectl-mcp-server\nhttps://pypi.org/project/kubectl-mcp-server\nhttps://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server\nhttps://www.ox.security/blog/kubectl-mcp-server-remote-code-execution\n","enisa_id":"EUVD-2025-209796\n","aliases":"GHSA-94gr-w3q5-rfqr\nCVE-2025-65719\n","epss":0.0,"dataProcessed":"Oct 29, 2026, 11:01:28 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}