Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata

**DockerDash (Ask Gordon) vulnerability:** DockerDash is a critical meta-context injection flaw in Docker's Ask Gordon AI assistant that lets attackers embed executable instructions in Docker image LABEL metadata; when Ask Gordon parses and forwards these to the MCP Gateway, the instructions can be executed with the victim's Docker privileges or used to exfiltrate sensitive environment data. Docker addressed the issue in Desktop/CLI release 4.50.0 (Nov 2025); mitigation requires implementing strict validation and zero-trust checks on contextual metadata before passing it to AI agents or MCP tools.