DOCKER Hub has released a security advisory for CVE-2026-105445, describing a token flaw that could enable an attacker to secretly reassign a target user’s personal access token (PAT) during an account-to-organisation conversion. The flaw, rated CVSS 9.4 (v4), allowed an authenticated attacker to have a token retained and used with the target’s organisational access rights after the conversion, potentially re-purposing or abusing that token.
Docker’s advisory states that, while the risk was significant and classed as a software supply chain risk because it could enable malicious activity under a legitimate developer name, it did not grant access to the Docker Hub web interface and could not by itself facilitate a full account takeover.
The exposure window stretched from 26 August 2024 to 30 September 2026, during which tokens could be transferred during account conversions. Investigations by researchers Peter Molnar and Krisztian Hozak, supported by Docker’s security team, reviewed around 304,000 pushes tied to these transfers and found no evidence of malicious exploitation or tampering; most conversions appeared legitimate with pushes landing in the correct repositories.
A permanent fix was deployed on 30 September 2026: automatic token transfers during conversions were removed, with new organisation owners required to generate fresh credentials, plus added consent notices. All previously transferred tokens were deactivated on 8 October 2026. Administrators are urged to audit personal access tokens and consider migrating to organisation access tokens for automated workflows.