@Rog0x/Mcp-Docker-Tools (1.0.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/@rog0x/mcp-docker-tools-1.0.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 23 Oct 2026 15:43:06 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgmcp-docker-tools: Remote code execution in handleImageList (CVE-2026-106765)https://feed.craftedsignal.io/briefs/2026-10-mcp-docker-tools-rce/Fri, 23 Oct 2026 15:43:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-mcp-docker-tools-rce/CVE-2026-106765 identifies that @rog0x/mcp-docker-tools version 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.<p>An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function. The CVSS v3.1 base score for this vulnerability is 7.5.</p> highadvisory