Flaw Exposes Docker Desktop Users to Code Execution and Data Theft

{
  "signal_id": "83cbb489-2c28-4bc5-a526-ca8ff04f8578",
  "signal_type": "news",
  "signal_subtype": "launches",
  "detected_at": "2026-02-03T19:14:26+00:00",
  "company": {
    "name": "Docker",
    "domain": "docker.com"
  },
  "data": {
    "url": "https://impreza.host/flaw-exposes-docker-desktop-users-to-code-execution-and-data-theft",
    "title": "Flaw Exposes Docker Desktop Users to Code Execution and Data Theft",
    "excerpt": "Flaw exposes Docker Desktop users to code execution and data theft.\n\nCybersecurity researchers have disclosed details of a now-patched security flaw impacting Ask Gordon, an artificial intelligence (AI) assistant built into Docker Desktop and the Docker Command-Line Interface (CLI). Notably, attackers could exploit the issue to execute arbitrary code and exfiltrate sensitive data.\n\nSecurity firm Noma Labs has codenamed the critical vulnerability DockerDash. In response, Docker addressed the issue with the release of version 4.50.0 in November 2025.\n\n\"In DockerDash, a single malicious metadata label in a Docker image can be used to compromise your Docker environment through a simple three-stage attack: Gordon AI reads and interprets the malicious instruction, forwards it to the MCP [Model Context Protocol] Gateway, which then executes it through MCP tools,\" Sasi Levi, security research lead at Noma, said in a report shared with The Hacker News.\n\n\"Every stage happens with zero validation, taking advantage of current agents and MCP Gateway architecture.\"\n\nAs a result, successful exploitation can trigger critical-impact remote code execution on cloud and CLI systems or enable high-impact data exfiltration on desktop applications.\n\nAccording to Noma Security, the issue originates from Ask Gordon's treatment of unverified metadata as executable commands. Consequently, malicious...",
    "product": "version 4.50.0",
    "summary": "Docker, Inc. launched version 4.50.0 on Nov 1st '25.",
    "category": "launches",
    "found_at": "2026-02-03T19:14:26Z",
    "planning": false,
    "image_url": "https://impreza.host/wp-content/uploads/2021/09/vulnerabilidade-xss-ataque-attack-hackers.jpg",
    "confidence": 0.8288,
    "product_data": {
      "full_text": "version 4.50.0",
      "fuzzy_match": true,
      "release_type": "version 4.50.0",
      "release_version": "4.50.0"
    },
    "published_at": "2026-02-03T19:14:26Z",
    "effective_date": "2025-11-01",
    "article_sentence": "In response, Docker addressed the issue with the release of version 4.50.0 in November 2025."
  }
}

curl https://signals.autobound.ai/v1/signals/83cbb489-2c28-4bc5-a526-ca8ff04f8578 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"docker.com","limit":20}'