@rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList function

Summary

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.

Remediation

1. Inventory every @rog0x/mcp-docker-tools deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Advisoryhttps://github.com/advisories/GHSA-fq6x-j3g6-xx83
• Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-106765
• Referencehttps://github.com/rog0x/mcp-git-tools/issues/1
• Referencehttps://stillosdigitalholdings.com/advisories/CVE-2026-106765.cve.json
• Referencehttps://www.npmjs.com/package/@rog0x/mcp-docker-tools