CVE-2026-105445
Received Received - Intake

Incorrect Privilege Assignment in Docker Hub Account Conversion

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Docker Inc.

Description
An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then authenticated to the registry as the recipient and could pull, push, or delete images, within its scopes, in repositories accessible to that user, including organization repositories.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-105445
EUVD
EUVD-2026-98965

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Docker Docker Hub 2024-08-26T20:33:00Z

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then authenticated to the registry as the recipient and could perform actions like pulling, pushing, or deleting images within its scopes, including in organization repositories accessible to that user.

Impact Analysis

If you are a Docker Hub user, an attacker could gain unauthorized access to your repositories or organization repositories by exploiting this vulnerability. They could pull, push, or delete images, potentially leading to data theft, unauthorized modifications, or service disruption. Users with PATs in scope are particularly at risk.

Mitigation Strategies

Rotate all personal access tokens (PATs) associated with Docker Hub accounts, especially those used for registry access. Review and revoke any tokens that may have been reassigned without authorization. Audit repository permissions to ensure no unauthorized access remains.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105445. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart