Docker Fixes Critical Docker Hub Flaw Allowing Image Impersonation
Docker disclosed and fixed on September 30 a critical two-year-old Docker Hub vulnerability (CVE-2026-105445) that let one user push, pull, or delete images as another user via a personal access token, with no evidence of exploitation.
2newsrooms
2articles
3 hoursrunning
Oct 13first seen
Ask Scout
Scout answers questions about this story using only the coverage below.
Coverage over time
Articles
| Oct 13, 11:03 AM | thehackernews.com | Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another |
| Oct 13, 8:20 AM | bleepingcomputer.com | Docker Hub flaw let attackers impersonate users, tamper with images |