What is CVE-2025-66404?

CVE-2025-66404 is a medium-severity vulnerability in Flux159 Mcp-Server-Kubernetes, classified under Command Injection. CVSS score: 6.4/10. Published 2025-12-03.

How severe is CVE-2025-66404?

Medium severity. CVSS v3 base score is 6.4 out of 10.

RCE in Flux159 Mcp-Server-Kubernetes

CVE-2025-66404

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation (sh -c) without input validation, allowing shell metacharacters to be interpreted. This vulnerability can be exploited through direct command injection or indirect prompt injection attacks, where AI agents may execute commands without explicit user intent. This vulnerability is fixed in 2.9.8.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.015 (72.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H.

Affected products

Flux159 Mcp-server-kubernetes — versions < 2.9.8
Suyogs Mcp-server-kubernetes

Weakness classification (CWE)

CWE-77 — Command Injection

References

security-advisories@github.com (x_refsource_CONFIRM, Exploit, Vendor Advisory)
security-advisories@github.com (Patch, x_refsource_MISC)

Frequently asked questions

What is CVE-2025-66404?: CVE-2025-66404 is a medium-severity vulnerability in Flux159 Mcp-Server-Kubernetes, classified under Command Injection. CVSS score: 6.4/10. Published 2025-12-03.
How severe is CVE-2025-66404?: Medium severity. CVSS v3 base score is 6.4 out of 10.