Opening SecureFlowDocker MCP Gateway: Image Metadata Becomes Host-Mount Authority
Case summary & sources

AIDEFEND SecureFlow / SecureFlow Case Index

Docker aidefend-sf0074

Docker MCP Gateway: Image Metadata Becomes Host-Mount Authority

  • Tool Integrations & MCP
  • AI Infrastructure
  • System Compromise & RCE

Docker MCP Gateway launches tool servers from container images. CVE-2026-55887 allowed attacker-controlled OCI image metadata to populate privileged runtime fields, which became docker run arguments. The disclosed path can mount the host and Docker socket and run as root. Docker fixed versions before 0.42.2; neither prompt filtering nor no-new-privileges repairs these creation-time grants.

Mapped threat techniques

  • AML.T0050 Command and Scripting Interpreter

Source

Updated