CVE-2026-105445: Docker Hub PAT Reassignment Flaw

Reported by SOCRadar (Ameer Owda)

Summary by Cyber Security News14 Oct 2026, 16:21 CET

About this summary. This is a short excerpt from the description that SOCRadar published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/cve-2026-105445-docker-hub-pat/

CVE-2026-105445: Docker Hub PAT Reassignment Flaw Docker has disclosed CVE-2026-105445, a critical privilege assignment flaw in Docker Hub that could allow an attacker to reuse a personal access token (PAT) after it was reassigned to another user during account-to-organization conversion. The vulnerability carries a CVSS 4.0 score of 9.4 and is classified as CWE-266: Incorrect Privilege Assignment.

Read the full article at SOCRadar →

Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.