Docker Hub flaw let attackers impersonate users, tamper with images

Docker disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that allowed attackers to access another user's container repositories using a personal access token (PAT). The flaw could enable impersonation of users and tampering with images. Docker has not yet released a patch, but users are advised to rotate their PATs and review repository access logs for suspicious activity.