ZDI-CAN-29539: ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker MCP Plugin. User interaction is required to exploit this vulnerability in that the target must reference a malicious Docker image via a docker URI scheme. The ZDI has assigned a CVSS rating of 8.6. The following CVEs are assigned: CVE-2026-55887.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Prevent exploitation by blocking or validating references to untrusted Docker images via the docker URI scheme. Specific steps: 1) Disallow or validate any docker URI (docker://) inputs or configuration that the Docker MCP Plugin consumes so that users cannot reference arbitrary remote images. 2) Enforce an allowlist of trusted container registries and block image pulls from untrusted registries at the network/firewall level. 3) Require and verify image signing (e.g., enforce OCI image signature verification) before accepting or referencing images. 4) Restrict user ability to supply external docker URIs to only trusted, authenticated principals and log/monitor any attempts to reference external docker URIs.
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-29539?
The severity of ZDI-CAN-29539 is rated at 77, indicating a high risk due to the potential for remote code execution.
How do I fix ZDI-CAN-29539?
To fix ZDI-CAN-29539, ensure that your Docker MCP Plugin is updated to the latest version that addresses this vulnerability.
What can attackers do with ZDI-CAN-29539?
With ZDI-CAN-29539, attackers can execute arbitrary code on affected installations if a user references a malicious Docker image.
Is user interaction required to exploit ZDI-CAN-29539?
Yes, user interaction is required as the target must utilize a malicious Docker image for the exploit to succeed.
Which software is affected by ZDI-CAN-29539?
ZDI-CAN-29539 affects the Docker MCP Plugin utilized within Docker installations.