#ask-gordon

[ follow ]
#docker #mcp-gateway #meta-context-injection #remote-code-execution
#docker
fromSecurityWeek
2 months ago
Information security

DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft

A critical Docker Ask Gordon vulnerability allows malicious image metadata to execute arbitrary commands via MCP Gateway, enabling RCE or data exfiltration through 'meta-context injection'.
fromThe Hacker News
2 months ago
Information security

Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata

A metadata label in Docker images allowed Ask Gordon's AI to execute commands via MCP Gateway, enabling remote code execution and data exfiltration until patched.
more#docker
[ Load more ]