3.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-59377

CVE-2025-59377: mcp-kubernetes-server has an OS Command Injection vulnerability

feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is used. NOTE: this is unrelated to mcp-server-kubernetes and CVE-2025-53355.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-59377

CVE-2025-59377:

3.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
mcp-kubernetes-server	pip	<= 0.1.11

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the mcp-kubernetes-server package, specifically within the command.py file. The ShellProcess class in this file is designed to execute shell commands. The exec method of this class uses subprocess.run with shell=True, which is a known dangerous practice when combined with user-controllable input, as it can lead to OS command injection. The run method is a wrapper that calls the exec method, and is therefore also vulnerable.

The vulnerability is triggered when a user sends a request to the /mcp/kubectl endpoint. The server-side code handling this endpoint uses the ShellProcess class to execute kubectl commands. An attacker can craft a malicious request that includes additional shell commands, which will then be executed by the server. The shell=True parameter in the subprocess.run call allows the shell to interpret and execute these injected commands, leading to a command injection vulnerability.

For a security engineer, this means that any instance of mcp-kubernetes-server up to version 0.1.11 is vulnerable. Exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the server, potentially leading to a full compromise of the system. It is crucial to update to a patched version or apply a workaround that disables or restricts access to the vulnerable endpoint.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.