DOCKER FIXES CRITICAL ASK GORDON AI FLAW ALLOWING CODE EXECUTION VIA IMAGE METADATA

Summary from the TLDR InfoSec newsletter

Docker patched a critical “DockerDash” vulnerability in its Ask Gordon AI assistant that allowed attackers to hide malicious instructions in Docker image metadata labels, leading to remote code execution and data theft via MCP tools. The flaw exploited meta-context injection and breached trust boundaries among the AI, MCP gateway, and local tools, and is fixed in Docker Desktop 4.50.0.