CRITICAL 9.4 NVD
CVE-2026-105445
An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a perso
An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then authenticated to the registry as the recipient and could pull, push, or delete images, within its scopes, in repositories accessible to that user, including organization repositories.
References
- https://docs.docker.com/accounts/organization/setup/convert-account/
- https://ghostpat.com/
- https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/
This critical severity vulnerability with a CVSS score of 9.4 was published on 2026-10-13 via NVD.
Risk Timeline
CVE Disclosed2026-10-13 · -1 days ago
Remediation Resources
Official Advisory
www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/Analysis & PoC
ghostpat.com/
vulnfeed aggregates 13242 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.