CVE-2026-106765: n/a

This vulnerability exists in the handleImageList function of @rog0x/mcp-docker-tools 1.0.1. It allows a remote attacker to execute arbitrary code, potentially compromising the affected system. The CVSS 3.1 score is 7.5, indicating high severity, with attack vector network, high attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation can lead to arbitrary code execution remotely, impacting system confidentiality, integrity, and availability. The attack requires user interaction and has a high complexity, which may limit exploitability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, users should exercise caution when handling inputs processed by the handleImageList function and consider restricting access or usage of the affected tool.