Security Advisory

CVE-2025-59377

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-15 00:00:00

Last updated 2025-09-15 15:10:40

Assigner mitre

CVSS score 3.7

State PUBLISHED

Description

feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is used. NOTE: this is unrelated to mcp-server-kubernetes and CVE-2025-53355.

← Browse all CVEs View on cve.org ↗