Tools AI Risk Radar ai-incident-0227
Incident record
Docker MCP Gateway tool names could divert arguments
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- Docker MCP Gateway 0.43.1 through 0.43.3
- Actor
- researcher
What happened
A malicious MCP server could use case variants of reserved tool names to receive arguments intended for built-in gateway tools. Docker fixed the issue in version 0.44.1.
The operator must enable the attacker-controlled server and the client must select the look-alike tool. The maintainer rates GHSA-qg99-jrvf-j9fh Medium and identifies tool-name prefixing as a workaround. The advisory supplies no numerical CVSS score.
Sources
- Docker maintainer advisorygithub.com/docker/mcp-gateway/security/advisories/GHSA-qg99-…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026