Docker Hub flaw let attackers impersonate users, tamper with images

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers impersonate other users and tamper with their container images, BleepingComputer reports. The flaw involved personal access tokens being reassigned to a designated organization owner without changing the token’s secret or obtaining the target’s consent.