Executive brief
suvarchal docker-mcp-server is a tool used to manage Docker containers via a standardized interface. A security flaw allows remote attackers to execute unauthorized commands on the host system by sending specially crafted requests to stop or remove containers. This could lead to a complete takeover of the server, unauthorized access to sensitive data, or disruption of containerized services.
Technical details
An OS command injection vulnerability (CWE-78) exists in suvarchal docker-mcp-server versions up to 0.1.0. The vulnerability is located in the src/index.ts file within the stop_container, remove_container, and pull_image handlers. These functions take user-supplied arguments (such as container names or image tags) and concatenate them directly into shell command strings executed via execAsync without proper sanitization or quoting. A remote attacker can exploit this by sending a JSON-RPC request containing shell metacharacters (e.g., semicolons) to execute arbitrary commands with the privileges of the server process. As of the advisory date, no official patch has been released by the maintainer.
Affected products
- suvarchal docker-mcp-server up to 0.1.0
Timeline
- 2026-03-15: disclosed: Vulnerability reported to the vendor via issue report.
- 2026-03-24: other: Public exploit details shared on GitHub.
- 2026-04-07: advisory: CVE-2026-5741 published.