Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

October 13, 2026 · 3:20 pm 2 sources

Image: BleepingComputer

Coverage

Coverage

• Docker Hub flaw let attackers impersonate users, tamper with images
  BleepingComputer · October 13, 2026 15:20
  Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]

More coverage

• Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
  The Hacker News · October 13, 2026 18:03
  A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal…