As cited
Copy frozen at (site build).
vulnerabilities
Docker Hub flaw let attackers impersonate users, tamper with images
Docker disclosed CVE-2026-105445, a critical vulnerability in Docker Hub that allowed attackers to access other users' container repositories using a personal access token (PAT). The flaw created exposure for image tampering and user impersonation across the platform.
Why it matters: Organizations using Docker Hub for container storage and distribution face risks of repository compromise, poisoned images, and supply chain attacks; teams should audit PAT usage and revoke tokens created before the patch date.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Docker Hub flaw let attackers impersonate users, tamper with images
Docker disclosed CVE-2026-105445, a critical vulnerability in Docker Hub that allowed attackers to access other users' container repositories using a personal access token (PAT). The flaw created exposure for image tampering and user impersonation across the platform.
Why it matters: Organizations using Docker Hub for container storage and distribution face risks of repository compromise, poisoned images, and supply chain attacks; teams should audit PAT usage and revoke tokens created before the patch date.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Docker Hub flaw let attackers impersonate users, tamper with images
Docker disclosed a critical vulnerability (CVE-2026-105445) affecting Docker Hub that allowed attackers to access another user's container repositories by leveraging a personal access token (PAT). The flaw enabled unauthorized users to impersonate legitimate account holders and modify stored container images.
Why it matters: DevOps teams and container users relying on Docker Hub for image storage and distribution face the risk of supply chain compromise through impersonation and image tampering; immediate review of personal access tokens and repository access controls is needed.
- Source published
- First seen by Cybersecurity Tracker