Meta Remote Code Execution Vulnerability
Evidence indicates that Meta is affected by remote code execution.
What Happened
Evidence indicates that Meta is affected by remote code execution.
Why This Matters
The evidence matters to defenders using Meta because it could let an attacker run code in affected environments.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether Meta is present in your environment and review the affected configuration.
Exposure
Feb 09, 2026 05:30
Feb 09, 2026 05:30
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
Feb 09, 2026 05:30BugSkan first recorded this incident.
-
⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More - The Hacker News
Feb 09, 2026 05:30thehackernews.com · Vulnerability
Sources
thehackernews.com · Feb 09, 2026 05:30
A critical-severity vulnerability, named DockerDash, in Docker's Ask Gordon AI assistant allows for Remote Code Execution (RCE) in Docker environments. This is achieved through "meta-context injection," where malicious instructions embedded in Docker image metadata labels are executed by the Model Context Protocol (MCP) Gateway without proper validation.
Open publisher sourceWatchlist Match
Create an account to see which incidents overlap with the technologies you monitor.