{"data":{"id":"03429ed2-c64e-4ec4-8e14-def0afa3e5ef","title":"CVE-2025-66404: MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is…","summary":"CVE-2025-66404 affects the exec_in_pod tool in mcp-server-kubernetes, an MCP Server that connects to and manages Kubernetes clusters, in versions prior to 2.9.8. When the tool receives a command as a string, it is passed directly to sh -c without input validation, so shell metacharacters are interpreted. Exploitation can occur through direct command injection or through indirect prompt injection, where AI agents may run commands without explicit user intent.","solution":"Fixed in 2.9.8.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-66404","publishedAt":"2025-12-03T21:15:53.233Z","cveId":"CVE-2025-66404","cweIds":["CWE-77"],"cvssScore":"6.4","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["mcp-server-kubernetes@<= 2.9.7 (fixed: 2.9.8)"],"affectedPackageNames":["mcp-server-kubernetes"],"affectedPackageRefs":["npm:mcp-server-kubernetes"],"affectedVendors":[],"affectedVendorsRaw":["MCP Server Kubernetes"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MCP Server Kubernetes command injection in exec_in_pod tool","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0148,"epssCheckedAt":"2026-11-04T18:09:13.116Z","kevDateAdded":null,"advisoryAliases":["GHSA-wvxp-jp4w-w8wg"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:50.041Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-12-01T03:31:16.720Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:42:23.086Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"mcp-server-kubernetes","fixedVersion":"2.9.8","matchedVersion":"2.9.8","fixReleasedAt":"2025-12-01T03:31:16.720Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:22.936Z"}]}}