Docker Hub flaw let users push images as others for two years
Docker fixed CVE-2026-105445, a critical Docker Hub bug that handed a victim's personal access tokens to an attacker during account-to-organization conversion. Docker found no evidence of abuse.