CVE-2025-66404

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation (sh -c) without input validation, allowing shell metacharacters to be interpreted. This vulnerability can be exploited through direct command injection or indirect prompt injection attacks, where AI agents may execute commands without explicit user intent. This vulnerability is fixed in 2.9.8.

• CWE-77

• https://github.com/Flux159/mcp-server-kubernetes/commit/d091107ff92d9ffad1b3c295092f142d6578c48bPatch
• https://github.com/Flux159/mcp-server-kubernetes/security/advisories/GHSA-wvxp-jp4w-w8wgExploit, Vendor Advisory
• https://github.com/Flux159/mcp-server-kubernetes/security/advisories/GHSA-wvxp-jp4w-w8wgExploit, Vendor Advisory

Published

Dec 3, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-66399Cacti is an open source performance and fault management fra…8.8
• CVE-2025-6640PDF-XChange Editor U3D File Parsing Use-After-Free Remote Co…7.8
• CVE-2025-66400mdast-util-to-hast is an mdast utility to transform to hast.…5.3
• CVE-2025-66401MCP Watch is a comprehensive security scanner for Model Cont…9.8
• CVE-2025-66402Misskey is an open source, federated social media platform. …6.5
• CVE-2025-66403FileRise is a self-hosted web-based file manager with multi-…5.4
• CVE-2025-66405Portkey.ai Gateway is a blazing fast AI Gateway with integra…9.8
• CVE-2025-66406Step CA is an online certificate authority for secure, autom…5
• CVE-2025-66407Weblate is a web based localization tool. The Create Compone…5
• CVE-2025-66409ESF-IDF is the Espressif Internet of Things (IOT) Developmen…9.1
• CVE-2025-6641PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Infor…3.3
• CVE-2025-66410Gin-vue-admin is a backstage management system based on vue …9.1