Docker Hub flaw let attackers impersonate users, tamper with images

Docker disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers assume another user’s registry identity by hijacking personal access tokens (PATs). An attacker could create an account and PAT, convert that account into an organization, and designate a target user as the organization owner; Docker Hub reassigned the PAT to the named owner without rotating the secret or obtaining consent. Because a PAT authenticates at the registry level, a reassigned token could be used to pull, push, or delete images in repositories and organizations where the target had access, and to publish images under the victim’s name - a software supply-chain risk Docker rated critical. The flaw did not grant web-console privileges such as changing passwords, emails, or two-factor settings.

The bug was introduced on August 26, 2024, reported to Docker on September 30, 2026, and patched within about four hours. Docker analyzed 304,000 pushes made with transferred tokens and inspected high-risk public images, reporting no evidence of exploitation. Affected accounts and organization owners were notified on October 2; transferred PATs were deactivated on October 8 unless owners explicitly requested retention. Docker now prevents PAT transfers during account-to-organization conversions and requires user consent before naming organization owners; users who received no notification should assume they were not impacted.