Back Feeds.Feedburner

Docker Fixes ‘Ask Gordon’ AI Flaw That Enabled Metadata

Feeds.Feedburner •Deeba Ahmed • December 19, 2025

Pillar Security has identified a critical indirect prompt injection vulnerability in Docker’s ‘Ask Gordon’ assistant. By poisoning metadata on Docker Hub, attackers could bypass security to exfiltrate private build logs and chat history. Discover how the "lethal trifecta" enabled this attack and why updating to Docker Desktop 4.50.0 is essential for developer security.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DockerDash Vulnerability Exposes AI Risks in Ask Gordon Assistant A security flaw known as DockerDash has been identified in Docker's Ask Gordon AI assistant, allowing attackers to manipulate metadata and influence execution flow. This vulnerability affects the Model Context Protocol (MCP) and can lead to unauthorized access to sensitive information, including API keys and internal network data. Researchers from Noma Labs have highlighted the implications of this flaw for AI supply chains. 12 sources 45

Docker Fixes ‘Ask Gordon’ AI Flaw That Enabled Metadata

The full story

Extracted Entities

Attack Types (1)

Platforms (3)