Medium severity6.3NVD Advisory· Published Oct 26, 2026

CVE-2026-116102

Description

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument project_name causes os command injection. It is possible to initiate the attack remotely.

Affected products

QuantGeekDev/docker-mcpllm-create
Range: 0.1.0/0.2.0

Patches

Vulnerability mechanics

References

vuldb.com/cve/CVE-2026-116102nvd
vuldb.com/submit/1002791nvd
vuldb.com/vuln/426170nvd
vuldb.com/vuln/426170/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000