A weakness has been identified in suvarchal docker-mcp-server up to 0.1.0. The impacted element is the function stop_container/remove_container/pull_image of the file src/index.ts of the component HTTP Interface. This manipulation causes os command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

The Command Injection vulnerability in suvarchal docker-mcp-server poses a significant threat. An attacker exploiting this flaw can execute arbitrary commands on the host system running the container management server. This could lead to complete system compromise, including data exfiltration, malware installation, and lateral movement within the network. The ability to remotely trigger commands dramatically increases the attack surface. Successful exploitation could allow an attacker to modify container configurations, access sensitive data stored within containers, or even pivot to other systems on the network. Given the public availability of the exploit, the risk of immediate exploitation is high.

1. 予約済み2026-04-07
2. 公開日2026-04-07
3. 更新日2026-04-08
4. EPSS 更新日2026-04-15

Due to the lack of a response from the project, immediate mitigation is crucial. The primary recommendation is to restrict network access to the docker-mcp-server instance, limiting exposure to potential attackers. Implement strict firewall rules to only allow necessary traffic. Consider using a Web Application Firewall (WAF) or reverse proxy to filter potentially malicious requests. While a patch is not yet available, carefully review the source code (src/index.ts) for input validation weaknesses and consider implementing temporary input sanitization measures if feasible. Monitor system logs for suspicious activity related to container management operations. After implementing these mitigations, verify their effectiveness by attempting to trigger the vulnerable function with carefully crafted input, ensuring no commands are executed.