CVE-2025-65719Disclosure

🚨 Critical - kubectl-mcp-server Remote Code Execution (CVE-2025-65719) A critical command injection vulnerability in kubectl-mcp-server allows unauthenticated attackers to execute arbitrary system commands (RCE). By injecting shell metacharacters into unsanitized input fields, an attacker can gain full control over the underlying host and potentially compromise the entire Kubernetes cluster. 👉 Affected: kubectl-mcp-server < 1.2.1

🚨 NEW Critical MCP Flaws 🚨 We discovered 3 new vulnerabilities in MCPs CVE-2025-65719 - ArchonOS CORS bypass exploit CVE-2025-69443 - kubectl-mcp-server Unauthenticated RCE Won't Fix - MarkItDown MCP - LPE via POST request The Archon OS CORS bypass allows any website to communicate with Archon and cross web to local boundaries to extract sensitive information and even control the Archon OS itself! (Check the POC it's pretty amazing - https://www.youtube.com/watch?v=t5GBb6-AScE) The kubectl-mcp-server vulnerability allows an attacker to execute commands on the kubectl-mcp-server by simply opening a malicious website. Click a link? -> command exec. BOOM. We published a LPE in MarkItDown MCP which won't be fixed, enabling a local attacker to reach files via POST requests when MarkItDown MCP is running on the machine. If you want to read more -> Main article: https://www.ox.security/blog/new-mcp-security-flaws-kubectl-mcp-server-archon-os-and-markitdown-vulnerabilities/ CVE-2025-69443 - Archon OS: https://www.ox.security/blog/cve-2025-69443-archon-os-vulnerable-to-unauthenticated-web-to-client-attack/ CVE-2025-65719 - kubectl-mcp-server: https://www.ox.security/blog/cve-2025-65719-critical-rce-in-kubectl-mcp-server/ MarkItDown MCP: https://www.ox.security/blog/markitdown-mcp-exposes-developer-machines-to-file-theft/