The Docker quickstart command starts the container listening on 0.0.0.0:8080 with authentication disabled by default. In this state, every request is mapped to a synthetic "nobody" user possessing Owner and Admin roles. This allows any unauthenticated party with access to the exposed port to gain full administrative access to the API and UI, enabling the registration and launch of attacker-controlled MCP (Model Context Protocol) servers. Additionally, because the quickstart mounts `/var/run/docker.sock` into the container, the MCP runtime backend can access the host's Docker control surface.