ZDI 2026-06-24

ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

CVE-2026-55887

Machine-generated analysis · WAYSCloud LLM

The vulnerability requires user interaction through referencing a malicious Docker image via a docker URI scheme.

Context

The Docker MCP Plugin is affected by an argument injection vulnerability during OCI image label parsing. This vulnerability can lead to remote code execution when a user references a malicious Docker image. The advisory notes user interaction is required, indicating exploitation depends on the user initiating a docker URI call. Worth noting the CVSS score is rated 8.6, reflecting high severity as scored by ZDI.

Operator considerations

Check: verify if Docker MCP Plugin is deployed and processing OCI image labels.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker MCP Plugin. User interaction is required to exploit this vulnerability in that the target must reference a malicious Docker image via a docker URI scheme. The ZDI has assigned a CVSS rating of 8.6. The following CVEs are assigned: CVE-2026-55887.

Read the full advisory on ZDI →