ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker MCP Plugin. User interaction is required to exploit this vulnerability in that the target must reference a malicious Docker image via a docker URI scheme. The ZDI has assigned a CVSS rating of 8.6. The following CVEs are assigned: CVE-2026-55887.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Block or restrict use of the 'docker' URI scheme (docker:<image>) at the application or network layer to prevent automatic referencing/fetching of untrusted OCI images. Implement firewall, proxy, or application-level policies that deny or require inspection/approval for docker: URIs originating from untrusted sources.
- Operational
Ensure users and automated systems do not reference untrusted Docker images via the docker URI scheme. Only reference images from vetted/trusted registries and verify image provenance before using docker:<image> URIs.
Event History
Frequently Asked Questions
What is the severity of ZDI-26-363?
ZDI-26-363 has a CVSS rating of 8.0, indicating a high severity level.
How can I fix ZDI-26-363?
To mitigate ZDI-26-363, ensure that your Docker MCP Plugin is updated to the latest version that addresses this vulnerability.
What type of vulnerability is ZDI-26-363?
ZDI-26-363 is a remote code execution vulnerability that allows attackers to execute arbitrary code.
What are the potential impacts of ZDI-26-363 if exploited?
If exploited, ZDI-26-363 can allow an attacker to gain control over the affected Docker MCP Plugin installation.
Is user interaction required to exploit ZDI-26-363?
Yes, user interaction is required as the target must reference a malicious Docker image via a Docker URI scheme.