CVE-2026-105445

🚨 DOCKER HUB DISCLOSES CRITICAL TOKEN-IMPERSONATION FLAW (CVE-2026-105445) Docker published an advisory on Oct 12, 2026 for a Docker Hub flaw that could let an attacker's personal access token (PAT) act as another user at the registry level. How it worked: • Converting a personal account into an organization re-assigned that account's PATs to whoever was named as the new owner, without rotating the secret or asking the owner • An attacker could name a target as owner and keep using the token as that target: pull, push or delete images in repos the target could reach • Exposure window: Aug 26, 2024 to Sept 30, 2026 What Docker says: • Researchers Peter Molnar and Krisztian Hozak reported it Sept 30; Docker deployed a fix the same afternoon • Affected users were emailed Oct 2; transferred PATs were deactivated Oct 8, except where owners opted out • After reviewing ~304,000 pushes made with transferred tokens, Docker found no evidence of exploitation ⚠️ Analyst Note: This was registry impersonation, not account takeover: no web UI access, password, email or 2FA changes. But publishing images under a trusted name is a real supply-chain risk, so Docker rated it critical. Review your Docker Hub PATs, revoke anything you don't recognize, and use organization access tokens for org automation. Advisory: https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/ Research: https://ghostpat.com/ #DDW #DarkWeb #Docker #SupplyChain #CVE #CyberSecurity

This is a HUGE security flaw in Docker Hub, just imagine the potential damage if a threat actor would poison any image freely 🤯🤯🤯 https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/

Fallo crítico en Docker Hub permite suplantar usuarios y subir imágenes Docker ha revelado una vulnerabilidad crítica en Docker Hub (CVE-2026-105445) que podría haber permitido a atacantes suplantar la identidad https://blog.elhacker.net/2026/10/fallo-critico-en-docker-hub-permite.html

1/5 A Docker Hub token was created by an attacker. After an account-to-organization conversion, the same secret authenticated as the victim. CVE-2026-105445, “GhostPat,” enabled registry impersonation without stealing a password. Here is the chain. 🧵 https://t.co/RRPrFbZtNM

Read the latest Docker Hub security advisory regarding CVE-2026-105445. Learn how this critical access token vulnerability impacts supply chain security. #DockerHub #SecurityAdvisory #CVE2026105445 #CyberSecurity #SupplyChain https://securityonline.info/docker-hub-security-advisory-cve-2026-105445/

เช้านี้เปิด Docker Hub ไล่ดู Personal access tokens ก่อนกินกาแฟเลยว่ะ ข่าว CVE-2026-105445 (GhostPat, CVSS 9.4) แปลง personal account เป็น org แล้ว PAT ถูกโอนให้ owner แบบไม่ถามไม่แจ้ง push/pull/delete image ในชื่อคนอื่นได้ Docker แก้ฝั่ง Hub แล้ว ยังไม่เจอ exploit แต่ revoke token แปลกๆ และให้ CI ใช้ org access token

Docker Hub flaw let attackers act as users and push images https://www.ctrlaltnod.com/news/docker-hub-cve-2026-105445-pat-account-conversion/

CVE advisory: CVE-2026-105445 - docker: Docker Hub account conversion could reassign an active personal access token to another user. https://vulnipulse.com/advisories/docker-cve-2026-105445 #CVE #CyberSecurity #Docker #DockerHub

A new Docker Hub vulnerability (CVE-2026-105445) let attackers impersonate users and publish container images using transferred PATs—fixed Sept 30. The flaw stemmed from Docker’s account-to-organization conversion that moved personal access tokens without owner approval or notice. While full account takeover wasn’t possible, image pushes, deletions or pulls under trusted repo names were. Docker’s audit of ~304,000 image pushes found no abuse. Users should revoke unknown or unused PATs and switch to org-level tokens. #Security #SupplyChain #Docker #Vulnerability #PAT #DevSecOps #ImageSecurity #Security #Docker #ImageSecurity #SupplyChain #Vulnerability #DevSecOps #PAT #TokenSecurity https://thedailytechfeed.com/docker-hub-flaw-let-attackers-impersonate-users-push-malicious-images/

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT). https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT). #cybersecurity https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/

Docker Hub let attackers access any user's container repositories with a personal access token (CVE-2026-105445). The vulnerability is patched, but Docker hasn't disclosed when the flaw was introduced, how long it was exploitable, or whether any repositories were actually compromised. If you run infrastructure on images you didn't build yourself, how do you verify no one tampered with them between the vendor and your deployment? #cybersecurity #infosec

🚨 A critical Docker Hub flaw put authentication tokens at risk. 🐳🔓 Docker has patched CVE-2026-105445, a token-transfer vulnerability that could threaten the security of container workflows. 🐳 Docker Hub affected 🔑 Token security at risk ⚠️ Critical vulnerability patched 🛡️ Container supply chains in focus A weakness in token handling can put more than one container at risk. 👉 Read the CVE breakdown and what Docker fixed 👇 https://www.xcademia.com/news/docker-hub-fixes-critical-token-transfer-flaw-in-cve-2026-105445 #Docker #CyberSecurity #CVE #ContainerSecurity #DevSecOps #CloudSecurity #SupplyChainSecurity #InfoSec #Xcademia

Docker Hub fixed a critical flaw (CVE-2026-105445, CVSS 9.4). Account conversion could reassign a personal access token to another user without rotating it. The token then worked as that user within its scope. Docker says it found no evidence of exploitation. The fix is server-side. Details: http://vulntracker.io/cves/CVE-2026-105445 #Docker #DockerHub #SupplyChain

Docker Hub CVE-2026-105445 let a personal access token get reassigned to another user during account conversion. Window: Aug 2024 to 30 Sep 2026. Docker found no abuse. If you got the 2 Oct email, review tokens. #CloudSec #SupplyChain #InfoSec Blog: https://erp.mitss.net.za/blog/our-blog-1/docker-hub-cve-2026-105445-142

Docker Hub CVE-2026-105445: turning an account into an org moved its tokens to the named owner unrotated, so the creator could push images as them. A credential changing owners should be rotated. https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/

Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions (CVE-2026-105445) dlvr.​it/TVvZWT #devops #architecture https://t.co/sM7HeZfweH

TRC analysis shows attackers exploited Docker Hub's GhostPat flaw (CVE-2026-105445) to hijack Personal Access Tokens and push malicious containers under legitimate namespaces. The two-year vulnerability enabled supply chain compromise through trusted repository takeover. #SupplyChainSecurity 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/docker-hub-critical-flaw-cve-2026-105445-ghostpat

⚠️ Docker Hub — CVE-2026-105445 : une faille permettait d'usurper un utilisateur et de modifier ses images via un jeton PAT. Corrigée le 30/09. Aucune exploitation détectée. Comptes concernés : vérifiez vos jetons d'accès. #Cyber #SupplyChain

🚨Critical - Docker Hub PAT Reassignment via Account-to-Org Conversion (CVE-2026-105445) Docker Hub’s account-to-organization conversion flow incorrectly assigns privileges, letting an authenticated attacker rebind a PAT they control to another user without rotating/revoking the secret. The unchanged PAT then authenticates to the registry as the victim, enabling pull/push/delete within the token scopes across repos the victim can access (incl org repos). 👉Affected: Docker Hub (account-to-organization conversion feature)