Is there a public PoC exploit available for CVE-2026-5741?

Yes, a public proof-of-concept exploit is available for CVE-2026-5741. Prioritise patching immediately. EPSS: 1.0%.

Docker CVE-2026-5741

Q: What is the CVSS score of CVE-2026-5741?

CVE-2026-5741 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.0%.

EUVD-2026-19933 MEDIUM

OS Command Injection (CWE-78)

2026-04-07 VulDB

Docker Command Injection Docker Mcp Server

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

PoC Detected

Apr 08, 2026 - 21:27 vuln.today

Public exploit code

EUVD ID Assigned

Apr 07, 2026 - 20:16 euvd

EUVD-2026-19933

Analysis Generated

Apr 07, 2026 - 20:16 vuln.today

CVE Published

Apr 07, 2026 - 20:00 nvd

MEDIUM 6.9

DescriptionCVE.org

A weakness has been identified in suvarchal docker-mcp-server up to 0.1.0. The impacted element is the function stop_container/remove_container/pull_image of the file src/index.ts of the component HTTP Interface. This manipulation causes os command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Remote code execution via OS command injection in suvarchal docker-mcp-server through 0.1.0 allows unauthenticated attackers to execute arbitrary commands by manipulating the stop_container, remove_container, or pull_image HTTP interface functions. Publicly available exploit code exists, and while the vendor was notified early through GitHub issue #3, no patch has been released as of the analysis date.

Technical ContextAI

The vulnerability resides in the HTTP interface implementation (src/index.ts) of docker-mcp-server, a Model Context Protocol server for Docker operations. The root cause is CWE-78 (OS Command Injection), where user-supplied input is passed unsanitized to shell command execution functions. Docker container operations (stop, remove, pull) typically invoke the Docker CLI or API with parameters derived from HTTP request data. The lack of input validation or proper command escaping allows attackers to inject shell metacharacters and arbitrary commands. The CVSSv4 vector (AV:N/AC:L/PR:N) confirms the attack is remote, requires no special conditions, and demands no privileges, indicating direct command injection without require proof-of-concept complexity.

RemediationAI

No vendor-released patch identified at time of analysis; the project has not responded to early notification. As an immediate interim measure, restrict HTTP access to the docker-mcp-server interface via network controls (firewall rules, VPC isolation, API gateway authentication) to allow only trusted clients. Audit all deployments for active instances and prepare for rapid upgrade when a patched version is released. Monitor the upstream repository (https://github.com/suvarchal/docker-mcp) and vendor advisories for security updates. If the project remains unresponsive, consider switching to alternative Docker integration solutions or forking the project with security fixes applied locally. Do not expose docker-mcp-server directly to untrusted networks.