Docker Hub flaw let attackers impersonate users, tamper with images

Docker has patched a critical vulnerability, tracked as CVE-2026-105445, in Docker Hub that allowed attackers to hijack another user's personal access token (PAT) by converting their own account into an organization and designating the victim as its owner. Because the reassignment process didn't rotate the token's secret or require the target's consent, the attacker could then authenticate as that user within the PAT's scope and push, pull, or delete images in their repositories and connected organizations — a serious supply-chain risk since it could enable publishing malicious images under a trusted identity. The bug, present since August 26, 2024, was reported on September 30, 2026, and fixed in production within four hours; Docker says a review of 304,000 token-based pushes found no sign of abuse. Affected accounts were notified on October 2 and had their transferred tokens deactivated on October 8, while Docker Hub now requires explicit consent before naming someone an organization owner and no longer auto-transfers PATs during conversions.

Docker clarified the flaw did not grant Docker Hub web console access or let attackers alter passwords, email addresses, or two-factor authentication settings, so account takeover in the traditional sense wasn't possible. Users who never received a notification from Docker are considered unaffected and don't need to act.