A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0. Affected by this issue is some unknown functionality of the file src/services/docker…

CVE-2026-7061 affects Toowiredd chatgpt-mcp-server up to version 0.1.0. The vulnerability is located in the docker.service.ts file of the MCP/HTTP component. It allows for OS command injection through manipulation of unknown functionality. The vulnerability can be exploited remotely and a public exploit is available. The project maintainers have been notified through an issue report but have not yet responded to the security disclosure.