Evidence · DiggingBeagle record
GHSA-qg99-jrvf-j9fh: reserved Docker MCP Gateway tool names
Vendor advisory documents case-sensitive tool-name collision validation versus case-insensitive enablement, affected 0.43.1–0.43.3 and fixed 0.44.1.
- Published
- Oct 13, 2026
- Source role
- primary disclosure
Evidence record
Vendor advisory documents case-sensitive tool-name collision validation versus case-insensitive enablement, affected 0.43.1–0.43.3 and fixed 0.44.1.
Claim-level citations (3)
- supportsDocker MCP Gateway tool-name case mismatch allowed reserved-tool impersonation: The advisory specifies 0.44.1 as the fix and identifies versions 0.43.1 through 0.43.3 as vulnerable.
GHSA affected versions and remediation
- supportsDocker MCP Gateway tool-name case mismatch allowed reserved-tool impersonation: Reserved tool collision checking used case-sensitive comparison while enablement treated names differently, allowing a case-variant impersonator.
GHSA root cause: validateToolNameCollisions / isToolEnabled
- supportsDocker MCP Gateway tool-name case mismatch allowed reserved-tool impersonation: An attacker needs influence over an MCP server already enabled in the gateway, and a colliding tool must actually be selected for arguments to reach the impersonator; the advisory does not describe a drive-by remote victim.
Docker security advisory GHSA-qg99-jrvf-j9fh, attacker requirements and affected behavior