Docker Hub vulnerabilities

Latest Docker Hub CVEs

Newest publication first

1. CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user

   Published 2026-10-13

   Critical·CVSS 9.4

   An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.