Docker Ask Gordon

DockerDash research used image metadata to redirect Ask Gordon tool actions

Noma’s reported chain crossed from untrusted image labels into privileged assistant tooling; Docker shipped a fix in 2025.

Security brief · 1 source · 29 Oct 2026