Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-116102

QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument project_name causes os command injection. It is possible to initiate the attack remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QuantGeekDev docker-mcp

  • 0.1.0affected
  • 0.2.0affected

References