DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft

Back Securityweek

DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft

Securityweek • February 4, 2026

Share: View original

The critical Docker Ask Gordon bug named DockerDash can be exploited via malicious metadata labels to compromise Docker environments.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DockerDash Vulnerability Exposes AI Risks in Ask Gordon Assistant A security flaw known as DockerDash has been identified in Docker's Ask Gordon AI assistant, allowing attackers to manipulate metadata and influence execution flow. This vulnerability affects the Model Context Protocol (MCP) and can lead to unauthorized access to sensitive information, including API keys and internal network data. Researchers from Noma Labs have highlighted the implications of this flaw for AI supply chains. 12 sources 45

Extracted Entities

Attack Types (1)

Tools (1)

Vulnerabilities (1)