CVE-2025-65719 RCE in Kubectl MCP Server via Tool Input Injection with PoC

CVE-2025-65719: Kubectl MCP Server Remote Code Execution Vulnerability Summary Vulnerability Overview CVE ID: CVE-2025-65719 Severity: Critical Vulnerability Type: Remote Code Execution (RCE) Affected Component: Kubectl MCP Server (Kubernetes Model Context Protocol Server) Attack Principle: An attacker lures a victim to visit a malicious website. This website sends malicious requests to the locally running Kubectl MCP Server on the victim's machine, exploiting the parameter to execute arbitrary Python shell commands, thereby executing code on the victim's machine. Scope of Impact Affected Versions: Kubectl MCP Server versions < 1.2.0 Potential Harm: Complete control over compromised devices. Access to Kubernetes clusters and containerized workloads. Exposure of Kubernetes credentials and service accounts. Deployment of malicious containers or modification of existing deployments. Lateral movement within connected cloud infrastructure. Access to Secrets, ConfigMaps, and sensitive cluster data. Remediation 1. Version Upgrade: Upgrade to version 1.2.0 or higher. 2. Network Restrictions: Avoid visiting untrusted websites while using Kubectl MCP Server. 3. Access Control: Do not configure unauthenticated MCP servers that allow direct web access. Bind to IP addresses (restrict to localhost only). Implement authentication or API key requirements. Conduct security audits for services that expose cluster access. 4. Principle of Least Privilege: Restrict the permissions of Kubernetes credentials and service accounts to the minimum necessary scope. POC / Exploit Code 1. Malicious Request Construction (curl command) 2. Malicious Website Request Generation Logic (Python Example)**

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-65719 RCE in Kubectl MCP Server via Tool Input Injection with PoC