Last seen February 3, 2026

Meta Remote Code Execution Vulnerability

Evidence indicates that Meta is affected by remote code execution.

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

Evidence indicates that Meta is affected by remote code execution.

Why This Matters

The evidence matters to defenders using Meta because it could let an attacker run code in affected environments.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Meta is present in your environment and review the affected configuration.

Exposure

Recommended Response
First Seen

Feb 03, 2026 05:30

Last Seen

Feb 03, 2026 05:30

Exploitation status: UNKNOWN

Primary entities:

Meta MCP Remote Code Execution

Timeline

  • Incident first seen
    Feb 03, 2026 05:30

    BugSkan first recorded this incident.

  • Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata - The Hacker News
    Feb 03, 2026 05:30

    thehackernews.com · Vulnerability

Sources

Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata - The Hacker News

thehackernews.com · Feb 03, 2026 05:30

A critical vulnerability, codenamed DockerDash, in Docker's Ask Gordon AI assistant allowed remote code execution and data exfiltration. This "Meta-Context Injection" flaw leveraged malicious metadata labels within Docker images, which Ask Gordon AI processed and executed via the MCP Gateway due to a lack of validation.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.

← Back to incident intelligence