Docker Hub flaw let attackers impersonate users, tamper with images

Kwetsbaarheden BleepingComputer 2 u geleden

Eén bron

Nog geen ander medium dat Zonactu volgt, meldt dit bericht.

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT).

Docker Hub is an online registry for storing, sharing, and downloading container images - templates that package everything needed for an application to run in an isolated environment.