Command Injection Vulnerability in MCP Server Kubernetes by Flux159
CVE-2025-66404

6.4MEDIUM

Key Information:

Vendor

Flux159

Status
Mcp-server-kubernetes
Vendor
CVE Published:
3 December 2025

What is CVE-2025-66404?

The MCP Server Kubernetes, which connects to and manages Kubernetes clusters, has a vulnerability in its exec_in_pod tool prior to version 2.9.8. This flaw permits the acceptance of user-provided commands without proper input validation, particularly when supplied in string format. As a result, shell metacharacters can be interpreted without restrictions, enabling potential exploitation via direct command injection or indirect prompt injection attacks where commands may execute without explicit user consent. This issue has been addressed in version 2.9.8.

Affected Version(s)

mcp-server-kubernetes < 2.9.8

References

https://github.com/Flux159/mcp-server-kubernetes/security...
x_refsource_CONFIRM
https://github.com/Flux159/mcp-server-kubernetes/commit/d...
x_refsource_MISC

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.