Threats affecting pkg:pypi/kubectl-mcp-server

Open Source Kubectl MCP Server version 1.1.1 and earlier contains a critical vulnerability that allows attackers to execute arbitrary code on a victim system. This occurs through user interaction with a crafted HTML page. The vulnerability is identified as CWE-94 and has a CVSS score of 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed beyond viewing the malicious page. A fix is available in version 1.2.0.

CVE-2025-69902 is a critical command injection vulnerability found in the minimal_wrapper.py component of kubectl-mcp-server version 1.2.0. This flaw allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious shell metacharacters. The vulnerability has a CVSS score of 9.8, reflecting its high impact on confidentiality, integrity, and availability without requiring user interaction or privileges. Although no known exploits are currently reported in the wild, the ease of exploitation and the critical nature of the vulnerability make it a significant threat. Organizations using kubectl-mcp-server should prioritize patching or mitigating this issue to prevent potential compromise. The vulnerability is related to CWE-94, indicating improper control of code injection.