Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
Docker Hub flaw let attackers impersonate users, tamper with images
Summary + source link. No paywalls, no tracking.