BBleepingComputerinVulnerability·high
Docker Hub Authentication Bypass Vulnerability Disclosed
Docker has disclosed a critical vulnerability in Docker Hub tracked as CVE-2026-105445. The flaw allows attackers to access another user's container repositories using a personal access token (PAT). The vulnerability was reported by BleepingComputer on October 13, 2026. No confirmed exploitation in the wild has been reported at the time of disclosure. Docker has released security updates to address the issue, and users are advised to rotate compromised personal access tokens.
11m