HighVulnerabilityCVE-2026-106765updated 30 Oct 2026, 15:30 UTC
mcp-docker-tools (npm): flaw allows remote code execution
A helper package for managing Docker containers has a bug that could let an outside attacker run their own commands on the computer using it. Anyone who uses this package should update or stop using it until a fix is confirmed.
Official, 2 sources
| Severity | HighCVSS 7.5 of 10 |
|---|---|
| Being exploited? | UnclearNo reports either way yet |
| Fix available? | UnclearNo fixed version published in the sources yet |
| How sure is this? | Official, 2 sourcesBacked by an official source |
What happened
In @rog0x/mcp-docker-tools up to and including 1.0.1, the handleImageList function is affected by an issue that allows a remote attacker to execute arbitrary code.
Why it is dangerous: Successful exploitation would give an attacker the ability to run code with the privileges of the process using the package, which could mean control over the host system and its Docker environment. Developers and teams running this package in tools or automation are at risk.
Are you affected?
You are affected if you use the npm package @rog0x/mcp-docker-tools at version 1.0.1 or earlier.
| Package / product | Affected versions | Fixed in |
|---|---|---|
| @rog0x/mcp-docker-tools · npm | <= 1.0.1 | no fix yet |
What to do
- Check whether @rog0x/mcp-docker-tools is in your project dependencies (for example, package.json or package-lock.json)
- Update to a version newer than 1.0.1 if one is available, or remove the package until a fixed release is confirmed
- Restrict the privileges and network exposure of any process that runs this package
Timeline
- 23 Oct 2026, 15:17 UTCPublicly disclosed
- 23 Oct 2026, 15:17 UTCReported by NVD · NVD
- 30 Oct 2026, 15:30 UTCGitHub Advisory reported on it · GitHub Advisory
Sources 2 reports, oldest first
Official vendor, government CERT or advisory database
- NVD23 Oct 2026, 15:17 UTC
- @rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList functionGitHub Advisory · 23 Oct 2026, 15:31 UTC
Technical details
- ID
- CVE-2026-106765 · GHSA-fq6x-j3g6-xx83
- CVSS
- 7.5 / 10
- EPSS
- 0.5% chance of exploitation within 30 days
- Disclosed
- 23 Oct 2026, 15:17 UTC
- On Zero Radar
- before the radar started
- Last change
- 30 Oct 2026, 15:30 UTC
The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works