PT-2026-35268 · Toowiredd · Chatgpt-Mcp-Server

Mida · Published 2026-04-26 · Updated 2026-05-23 · CVE-2026-7061

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions chatgpt-mcp-server versions prior to 0.1.1

Description An OS command injection flaw exists in the MCP/HTTP component within the src/services/docker.service.ts file. This issue allows unauthenticated remote attackers to achieve remote code execution via the Docker service component, which is designed to bridge Model Context Protocol (MCP) servers with Docker containers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the src/services/docker.service.ts component to minimize the risk of exploitation.

Exploit

RCE

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2026-7061

Affected Products

Chatgpt-Mcp-Server

References · 12

• 🔥 https://github.com/wing3e/public_exp/issues/28 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7061 · Security Note
• https://github.com/Toowiredd/chatgpt-mcp-server/issues/8 · Note
• https://twitter.com/lyrie_ai/status/2058050572347969675 · Twitter Post
• https://twitter.com/lyrie_ai/status/2058050573513957489 · Twitter Post
• https://twitter.com/CVEnew/status/2048546597253128670 · Twitter Post
• https://vuldb.com/vuln/359636/cti · Note
• https://vuldb.com/submit/798613 · Note
• https://twitter.com/lyrie_ai/status/2058050574814233009 · Twitter Post
• https://vuldb.com/vuln/359636 · Note
• https://twitter.com/lyrie_ai/status/2058050571165204532 · Twitter Post
• https://github.com/Toowiredd/chatgpt-mcp-server · Note