Docker Hub Security Advisory: CVE-2026-105445 Token Flaw
ID: 2ee05b87-2c03-5000-bbba-ec0f4e05555f
STIX ID: report--2ee05b87-2c03-5000-bbba-ec0f4e05555f
Feed Name: securityonline.info
Threat Score
Docker Hub patched CVE-2026-105445 (CVSS 9.4), a critical flaw that reassigned active personal access tokens during account-to-organization conversions and could let attackers push or publish images under trusted developer names; the exposure window was 2024-08-26 to 2026-09-30, investigators found no confirmed malicious exploitation, and Docker implemented fixes and revoked transferred tokens.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.