Critical Docker Hub Flaw Exposed User Tokens for Two Years, Underscoring Supply Chain Risks

Docker has addressed a critical security vulnerability, tracked as CVE-2026-105445, within Docker Hub. The flaw, which existed for over two years from August 26, 2024, until its fix on September 30, 2026, allowed personal access tokens (PATs) to be inadvertently transferred to a new organization owner when a personal account was converted into an organization. This transfer occurred without the new owner's consent or notification, while the original token secret remained unchanged. This vulnerability is significant for practitioners because it created a critical software supply chain risk. An attacker could have exploited this by creating an account, generating a PAT, and then converting that account into an organization, naming another user as the owner. The attacker would retain knowledge of the token secret, but the token would then be linked to the victim, allowing the attacker to push, pull, or delete images as the impersonated user. While Docker states they found no evidence of exploitation after reviewing approximately 304,000 image pushes involving transferred tokens, the potential for malicious image injection or manipulation was considerable. This incident fits into the broader trend of increasing focus on software supply chain security. As containerization and microservices become ubiquitous, the integrity of container images and the registries that host them are paramount. Previous supply chain attacks, such as those involving malicious Trivy and KICS images, demonstrate the real-world impact of compromised publishing paths. The reliance on automated CI/CD pipelines often means that compromised credentials can have a wide-ranging and immediate impact across an organization's deployments. In practice, this means developers and DevOps teams should immediately review and revoke any personal access tokens they no longer use or recognize. For automated workflows that publish images to Docker Hub, it is crucial to transition from individual PATs to organization-managed access tokens, which offer better control and auditing capabilities. Furthermore, organizations should ensure that their security practices include regular auditing of image publishing activities and a robust process for managing credentials, especially those with elevated permissions. The lack of exploitation evidence in this specific case does not diminish the importance of proactive security measures to prevent similar vulnerabilities from being exploited in the future.