Docker Hub Authentication Bypass Vulnerability Disclosed

Docker has disclosed a critical vulnerability in Docker Hub tracked as CVE-2026-105445. According to reporting by BleepingComputer, the flaw allows attackers to access another user's container repositories using a personal access token (PAT). The vulnerability was disclosed on October 13, 2026. At the time of disclosure, no confirmed exploitation in the wild was reported. The Docker Hub platform is the affected product. Docker has released security updates to address the vulnerability. Users are advised to update Docker Hub and rotate any compromised personal access tokens to mitigate potential risk. The exact scope of affected repositories and the number of users impacted remain under investigation.