CVE-2026-116102

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
6.3
MEDIUM
CVSS v2 Base Score
7.5
HIGH

Description

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument project_name causes os command injection. It is possible to initiate the attack remotely.

Published
October 26, 2026 1:17 AM
Last Modified
October 26, 2026 1:17 AM
Source
[email protected]

Weaknesses (CWE)

CWE-77 CWE-78

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry