CVE-2026-116102

CVSS 6.3 (medium) · published 2026-10-26

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument project_name causes os command injection. It is possible to initiate the attack remotely.

Weakness: CWE-77, CWE-78

Source: NVD CVE-2026-116102

References

• https://vuldb.com/cve/CVE-2026-116102
• https://vuldb.com/submit/1002791
• https://vuldb.com/vuln/426170
• https://vuldb.com/vuln/426170/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.