CVE-2026-106765: High severity npm/@rog0x/mcp-docker-tools vulnerability

Published Oct 23, 2026

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.

Affected Software

1 affected component

npm/@rog0x/mcp-docker-tools=1.0.1

Event History

Oct 23, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Frequently Asked Questions

What does an attacker need to exploit this issue?

The available CVSS data indicates network access is required, no privileges are needed, and user interaction is required. Exploitation is rated as high complexity.

What is the potential impact if exploitation succeeds?

Successful exploitation can result in arbitrary code execution. The reported impact includes high confidentiality, integrity, and availability impact.

Which package version is identified as affected?

The issue is reported in @rog0x/mcp-docker-tools version 1.0.1.

CVE-2026-106765: High severity npm/@rog0x/mcp-docker-tools vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which package version is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which package version is identified as affected?