Tools AI Risk Radar ai-incident-0185
Incident record
Docker MCP Gateway fixes crashes from hostile resource addresses
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- Docker MCP Gateway from 0.14.0 to before 0.44.1
- Actor
- researcher
What happened
An attacker controlling an enabled downstream MCP server could return a crafted resource address that crashes gateway sessions.
The maintainer rates GHSA-jfp6-4vv7-6m6c Moderate, with CVSS 3.1 score 6.5. Version 0.44.1 fixes the SDK panic. The attacker must control or compromise a server already enabled in the gateway.
Sources
- Primary disclosuregithub.com/docker/mcp-gateway/security/advisories/GHSA-jfp6-…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026