DockerDash Exposes AI Supply Chain Weakness In Docker's Ask Gordon

Noma Labs disclosed "DockerDash," a critical AI-supply-chain vulnerability in Docker's Ask Gordon assistant where malicious Docker LABEL metadata is interpreted as instructions (Meta-Context Injection), enabling RCE in cloud/CLI environments and data exfiltration/reconnaissance in Docker Desktop; Docker issued mitigations and patched Docker Desktop 4.50.0, and users are urged to update.