CVE-2026-106765

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Oct 23, 2026

CISA due date

—

The record

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.

Ecosystem	Package	Introduced	Fixed