HIGH

CVE-2025-66404

CVSS v3

8.8

HIGH

EPSS Score

1.5 %

exploit probability, as of 2026-09-25

CISA KEV

known exploited

Exploitation

—

SSVC status

Description

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation (sh -c) without input validation, allowing shell metacharacters to be interpreted. This vulnerability can be exploited through direct command injection or indirect prompt injection attacks, where AI agents may execute commands without explicit user intent. This vulnerability is fixed in 2.9.8.

Technical details

Published: 2025-12-03

Frequently asked questions

What is CVE-2025-66404?

Is CVE-2025-66404 actively exploited?

Active exploitation of CVE-2025-66404 has not been confirmed. Its EPSS score was 1.5% on 2026-09-25, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2025-66404?

CVE-2025-66404 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2025-66404 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IP Search CVEs SIEM & TIP integrations

No credit card required · 500 free checks/month · Free API key

Other 2025 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database