Docker Desktop 4.67.0 Ships MCP Profile Templates and Security Fix

Docker shipped Docker Desktop 4.67.0 on March 30, 2026, continuing its aggressive MCP (Model Context Protocol) integration push with new profile template cards, a cleaner logging experience for Compose-based projects, expanded AI model support, and a security fix for a server-side request forgery (SSRF) vulnerability.

What Happened

The 4.67.0 release is the third Docker Desktop update in March 2026, following 4.66.1 (March 26) and 4.66.0 (March 23). Docker has been releasing roughly one major version per week as it rapidly builds out its AI developer tooling layer. The headline feature this cycle is MCP Profile Templates — a new onboarding mechanism inside the Docker MCP Toolkit's Profiles tab that gives developers pre-configured server bundles for common workflows. Instead of manually selecting and configuring individual MCP servers from the 100+ server catalog, developers can now start from a template card designed for use cases like web development (pre-configured with GitHub and Playwright), data analysis, or cloud infrastructure management.

Key Details

• MCP Profile Template Cards: New template cards in the MCP Toolkit Profiles tab let developers bootstrap a profile from a predefined server collection, eliminating manual server-by-server configuration. An interactive onboarding tour guides first-time users.
• Beta Logs View with Compose Stack Filtering: The Logs (Beta) view gains a new filter to scope log output to a specific Compose stack, reducing noise in multi-service local environments.
• Qwen3.5 Model Runner Support: Docker Model Runner adds support for the Qwen3.5 family of large language models for local LLM inference directly from Docker Desktop.
• Component Upgrades: Docker Compose v5.1.1, Docker Agent v1.34.0, Docker Scout CLI v1.20.3, and Docker Model v1.1.25.
• CVE-2026-33990 Patched: An SSRF vulnerability in Docker Model Runner's OCI Registry Client has been fixed — priority update for teams with sensitive internal networks.
• Bug Fixes: Resolved a rare Dashboard crash, UDP port binding failures, Rosetta issues on Apple Silicon Macs, and a Hyper-V re-enablement bug on Windows.

What Developers and Users Are Saying

The MCP Toolkit has generated significant community interest since Docker first announced built-in MCP support in late 2025. Developers on Hacker News have described the Docker MCP Catalog as "the npm of AI tools" — a centralized, sandboxed registry of server capabilities that any MCP-compatible client (Claude Desktop, Cursor, Continue.dev) can consume. The profile system addresses a real pain point: early adopters reported spending 20–30 minutes configuring individual servers before even testing a workflow. The template approach cuts that to under two minutes per community reports.

The SSRF patch (CVE-2026-33990) prompted more serious discussion in security circles. The vulnerability affected Docker Model Runner's OCI Registry Client and could allow a malicious OCI artifact to trigger internal HTTP requests from the host machine. Docker's security team patched it in the same release cycle.

What This Means for Developers

If you use Docker Desktop with any AI-assisted tooling — particularly Claude Desktop, Cursor, or Continue.dev connected via Docker's MCP Gateway — update to 4.67.0 immediately for the CVE-2026-33990 patch. The MCP Profile Templates are opt-in; existing profiles are unaffected. Teams using Docker Compose extensively will want to try the filtered Logs view in beta. Qwen3.5 support in Model Runner means teams can now run competitive open-weight models locally without cloud API spend.

What's Next

Docker's roadmap points toward deeper MCP catalog integrations and additional Model Runner backends. The Logs view remains in beta, with general availability expected soon. Docker Desktop 4.68.0 is expected within the next 7–10 days based on the current weekly release cadence. Monitor the official Docker Desktop release notes for updates.

Sources

• Docker Desktop Release Notes — Official changelog for v4.67.0
• Docker MCP Profiles Documentation — Official docs on MCP profile management
• Docker MCP Toolkit — Full feature documentation
• Releasebot Docker Releases — Aggregated release timeline
• Docker Security Announcements — CVE-2026-33990 details