DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft
A critical Docker Ask Gordon vulnerability allows malicious image metadata to execute arbitrary commands via MCP Gateway, enabling RCE or data exfiltration through 'meta-context injection'.
Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata
A metadata label in Docker images allowed Ask Gordon's AI to execute commands via MCP Gateway, enabling remote code execution and data exfiltration until patched.