CVE-2025-59377

9.8 criticalEPSS 1.2%

Critical (9.8) in feisky mcp-kubernetes-server. EPSS 1.2% chance of exploitation in the next 30 days.

feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is used. NOTE: this is unrelated to mcp-server-kubernetes and CVE-2025-53355.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2025-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

feisky:mcp-kubernetes-server

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-4hqq-7q79-932p	PyPI	mcp-kubernetes-server	<=0.1.11	no fix published
PYSEC-2026-409	PyPI	mcp-kubernetes-server	<=0.1.11	no fix published

References

https://github.com/feiskyer/mcp-kubernetes-server/blob/78957b6c1a3982080cf6fcaac6f6e9014116a71c/src/mcp_kubernetes_server/command.py#L38
https://github.com/william31212/CVE-Requests-1896609
https://github.com/william31212/CVE-Requests-1896609

Check your stack JSON