Threats tagged 'ghsa-94gr-w3q5-rfqr'

Open Source Kubectl MCP Server version 1.1.1 and earlier contains a critical vulnerability that allows attackers to execute arbitrary code on a victim system. This occurs through user interaction with a crafted HTML page. The vulnerability is identified as CWE-94 and has a CVSS score of 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed beyond viewing the malicious page. A fix is available in version 1.2.0.