{"id":"EUVD-2025-209796","revision":"cff4c1b3c92a42e581a6d45b572a9ddb","records":[{"revision":"cff4c1b3c92a42e581a6d45b572a9ddb","observedAt":"2026-10-27T23:52:36.365+00:00","statement":{"source":"euvd","id":"EUVD-2025-209796","aliases":["CVE-2025-65719"],"title":"An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.","description":"An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":null}],"references":["https://github.com/rohitg00/kubectl-mcp-server","https://www.ox.security/blog/kubectl-mcp-server-remote-code-execution","https://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server/"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209796","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 12, 2026, 12:00:00 AM","dateUpdated":"May 13, 2026, 2:12:16 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-209796","identifiers":["EUVD-2025-209796","CVE-2025-65719"]},"retained":false,"historicalAffected":[]}],"coverage":[]}