CVE-2026-106765

Command Injection (CWE-78) — Remote Code Execution

package @rog0x/mcp-docker-tools@1.0.1

attack vector MCP tool argument

status ASSIGNED (product correction in progress with MITRE)

credit Still OS Digital Holdings LLC (Marcus Still)

A remote attacker can execute arbitrary code by supplying a crafted MCP tool-call argument that is appended to a shell command.

Independently verify

affected component src/tools/image-list.ts — a documented tool argument is appended to a docker command string executed through a shell. The specific function and parameter name are WITHHELD until a fixed version is published or the 90-day deadline passes.

→ MITRE CVE record (ID reserved; record not yet published)

→ npm package (verify the source yourself)

→ Coordinated-disclosure issue

The affected component and public references are stated so you can confirm the finding from the package's own published source. A weaponized reproduction is withheld under coordinated disclosure until a fixed version ships.

Maintainer of @rog0x/mcp-docker-tools? Fixes, disputes, and coordinated-disclosure contact: here. Still OS Digital Holdings LLC.