Vulnerability Intelligence Report
QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection
CVE-2026-116102
A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument project_name causes os command injection. It is possible to initiate the attack remotely.
Injection
No Active Exploit Signals
CVSS Base Score
5.3
MEDIUM
EPSS Probability:0.91%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| QuantGeekDev | docker-mcp | 0.1.0 (affected), 0.2.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | VulDB · Researcher · Switzerland |
| Reserved | 2026-10-25T07:31:44 |
| Published | 2026-10-26T00:30:20 |
| Last Updated | 2026-10-26T16:37:59 |
Community Chatter & Buzz