DockerDash Vulnerability Exposes AI Risks in Ask Gordon Assistant

Feeds.Feedburner

DockerDash Vulnerability Exposes AI Risks in Ask Gordon Assistant

First seen 3 Feb 2026, 20:27 UTC • •45.3

Article Content

1 / 13

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

A security flaw known as DockerDash has been identified in Docker's Ask Gordon AI assistant, allowing attackers to manipulate metadata and influence execution flow. This vulnerability affects the Model Context Protocol (MCP) and can lead to unauthorized access to sensitive information, including API keys and internal network data. Researchers from Noma Labs have highlighted the implications of this flaw for AI supply chains.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 218d ago How this analysis works

More articles in this cluster (12)

Threat Graph

13 entities, 29 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Data Breach
Data Exfiltration
Remote Code Execution

Organization (1)

Noma Labs

Affected Platform (5)

Ask Gordon
Ask Gordon AI
Ask Gordon AI Assistant
Docker Desktop
Model Context Protocol

Tool (1)

Docker

Vulnerability (3)

DockerDash
DockerDash Vulnerability
Meta-Context Injection

Relationships

Docker exploits DockerDash
Docker exploits DockerDash Vulnerability
Docker exploits Meta-Context Injection
DockerDash targets Ask Gordon
DockerDash targets Ask Gordon AI
DockerDash targets Ask Gordon AI Assistant
DockerDash targets Docker Desktop
DockerDash Vulnerability targets Ask Gordon
DockerDash Vulnerability targets Ask Gordon AI
DockerDash Vulnerability targets Ask Gordon AI Assistant
DockerDash Vulnerability targets Docker Desktop
Meta-Context Injection targets Ask Gordon
Meta-Context Injection targets Ask Gordon AI
Meta-Context Injection targets Ask Gordon AI Assistant
Meta-Context Injection targets Docker Desktop
Data Breach targets Ask Gordon
Data Breach targets Ask Gordon AI
Data Breach targets Ask Gordon AI Assistant
Data Breach targets Docker Desktop
Data Exfiltration targets Ask Gordon
Data Exfiltration targets Ask Gordon AI
Data Exfiltration targets Ask Gordon AI Assistant
Data Exfiltration targets Docker Desktop
Remote Code Execution targets Ask Gordon
Remote Code Execution targets Ask Gordon AI
Remote Code Execution targets Ask Gordon AI Assistant
Remote Code Execution targets Docker Desktop
DockerDash related to Noma Labs
DockerDash related to Model Context Protocol

Following this threat?

Track Noma Labs in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…