CVE-2026-106765: @rog0x/mcp-docker-tools, a Model Context Protocol (MCP) server, executes arbitrary code via its handleImageList function
The GitHub-reviewed advisory GHSA-fq6x-j3g6-xx83 says an issue in @rog0x/mcp-docker-tools 1.0.1, a Model Context Protocol (MCP) server package, allows a remote attacker to execute arbitrary code via the handleImageList function.
The record
- Kind
- Vulnerability
- Source record
- GHSA-fq6x-j3g6-xx83: @rog0x/mcp-docker-tools: @rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList function (GitHub-reviewed advisory via OSV)
- Record published
- 2026-10-23
- Posted here
- 2026-10-31
- World
- Software agents · Enterprise work agents
- Controls concerned
- Containment and isolation C-E5
- Checked
- Checked against its record on 2026-10-31 by a reader who did not draft it; report
verification/reports/SIG-2026-10-31-009-2026-10-31.md.
A signal's controls are the ones its record points at, the exposure; a case's controls are the ones its records show were absent or failed, so the two can differ.
What a signal is. A signal records what a primary record says; it assigns no fault. It is lighter than a case: one dated item from one record, tagged with the world, sector and controls it touches. It becomes a case when it meets the bar for one.
New signals like this, once a week. A short email when a case, signal or rule touches software agents. Free; unsubscribe in one click.
Get the weekly emailNewer: Federal Motor Vehicle Safety Standards; Modernization of FMVSS No. 108 To Accommodate ADS-Equipped Vehicles
Older: CVE-2026-106763: @justice8096/sagemath-mcp-server, a Model Context Protocol (MCP) server, executes arbitrary code via its escapeShellString and sanitizeCode functions