CVE-2026-105445

UNKNOWN 0.0

Docker Hub account conversion could reassign an active personal access token to another user

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then authenticated to the registry as the recipient and could pull, push, or delete images, within its scopes, in repositories accessible to that user, including organization repositories.

CWE	CWE-266
Vendor	docker
Product	docker hub
Ecosystems	Container
Industries	Technology
Published	Oct 13, 2026

Stay Ahead of the Next One

Get instant alerts for docker docker hub

Be the first to know when new unknown vulnerabilities affecting docker docker hub are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Docker / Docker Hub

2024-08-26T20:33:00Z < 2026-09-30T19:10:00Z

References

NVD ↗ CVE.org ↗ EPSS Data ↗

docker.com: https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/ docs.docker.com: https://docs.docker.com/accounts/organization/setup/convert-account/ ghostpat.com: https://ghostpat.com/

Credits

🔍 Peter Molnar of mptrdev.com 🔍 Krisztian Hozak of mptrdev.com