CVE-2025-66404
Medium · 6.4mcp-server-kubernetes has potential security issue in exec_in_pod tool
CVSS
6.4
EPSS
1.5%
Published
Dec 3, 2025
CISA due date
—
The record
A security issue exists in the `exec_in_pod` tool of the `mcp-server-kubernetes` MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation (`sh -c`) without input validation, allowing shell metacharacters to be interpreted. This vulnerability can be exploited through direct command injection or indirect prompt injection attacks, where AI agents may execute commands without explicit user intent.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | mcp-server-kubernetes | 0 | 2.9.8 |
Related vulnerabilities
- GHSA-wvxp-jp4w-w8wg mcp-server-kubernetes has potential security issue in exec_in_pod tool Same vulnerability
- CVE-2026-47250 mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster… Also affects mcp-server-kubernetes
- CVE-2026-46519 mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster… Also affects mcp-server-kubernetes
- GHSA-6mx4-4h42-r8vh MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token… Also affects mcp-server-kubernetes
- GHSA-cr22-wjx7-2w6m MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering… Also affects mcp-server-kubernetes
- CVE-2026-39884 mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster… Also affects mcp-server-kubernetes
- GHSA-4xqg-gf5c-ghwq MCP Server Kubernetes has an Argument Injection in port_forward tool via space-splitting Also affects mcp-server-kubernetes
- CVE-2025-54073 mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with… Also affects mcp-server-kubernetes