Docker Hub flaw let attackers impersonate users, tamper with images

What happened?

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]

Key details

• The vulnerability stemmed from Docker Hub reassigning a PAT to a designated organization owner without changing its secret or obtaining consent.
• The flaw was rated critical because it enabled publishing images under a legitimate name, posing a software supply chain risk.
• The vulnerability did not grant web access to Docker Hub or allow changes to passwords, email, or two-factor authentication settings.
• Docker introduced the flaw on August 26, 2024, when account conversion began reassigning PATs without revoking or rotating the secret.
• Docker received a report on September 30, 2026, confirmed the issue, and deployed a fix to production in under four hours.

Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.