The vulnerability resides in the @rog0x/mcp-docker-tools package, version 1.0.1. It allows a remote attacker to execute arbitrary code by exploiting the handleImageList function. The flaw provides the attacker with the ability to run native system commands or code snippets without authentication, effectively granting full control over the hosting environment. This can lead to data exfiltration, defacement, installation of malware, and other malicious activities that compromise confidentiality, integrity, and availability.

The affected product is @rog0x/mcp-docker-tools, v1.0.1. No other affected vendors or products are listed. Users who deploy this npm package are at risk if they rely on the handleImageList endpoint.

The CVSS score of 7.5 indicates moderate to high severity. The EPSS score is <1%, indicating a very low probability of exploitation, yet the remote, unauthenticated nature of the vulnerability still makes it feasible for a determined adversary. The vulnerability is not yet listed in the CISA KEV catalog, but that does not reduce the potential impact. The likely attack vector is remote network, inferred from the ability to trigger the vulnerable function from outside the local system.