Full Report
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker said in a security advisory on October 12.
Analysis Summary
# Vulnerability: Docker Hub "GhostPat" Unauthorized Access Flaw
## CVE Details
- **CVE ID:** CVE-2026-105445
- **CVSS Score:** 9.4 (Critical)
- **CWE:** Not explicitly stated (Likely CWE-287: Improper Authentication or CWE-284: Improper Access Control)
## Affected Systems
- **Products:** Docker Hub (Cloud-based Registry)
- **Versions:** All versions between August 26, 2024, and September 30, 2026.
- **Configurations:** Accounts utilizing the "Convert to Organization" feature.
## Vulnerability Description
Dubbed **"GhostPat,"** this flaw existed in the Docker Hub logic for converting personal accounts into organizations. When a user initiated a conversion, they were required to designate a new account owner. The system correctly transferred the account's Personal Access Tokens (PATs) to the new owner’s identity; however, it failed to invalidate the existing token secrets.
Consequently, the original user retained knowledge of the PAT secrets that were now cryptographically linked to the new owner's identity. This allowed the original user to act as the new owner within the Docker registry without their knowledge or consent.
## Exploitation
- **Status:** PoC available (demonstrated by researchers mptrdev.com); no evidence of exploitation in the wild.
- **Complexity:** Low
- **Attack Vector:** Network
## Impact
- **Confidentiality:** High (Ability to pull private images from the victim's repositories).
- **Integrity:** High (Ability to push/overwrite malicious images under a legitimate user's name, facilitating supply chain attacks).
- **Availability:** High (Ability to delete images in the victim's repositories).
## Remediation
### Patches
- **Vendor Fix:** Docker deployed a server-side fix to Docker Hub on September 30, 2026. As Docker Hub is a managed service, **no manual software updates are required** for Docker Desktop or Engine users.
### Workarounds
- **Token Rotation:** Docker has invalidated all potentially affected PATs. Users who performed account conversions during the affected window must generate new Personal Access Tokens.
## Detection
- **Indicators of Compromise:** Registry logs showing unauthorized image pushes or pulls originating from PATs created prior to account conversion.
- **Detection Methods:** Docker performed a retrospective audit of 304,000 pushes and analyzed high-risk public images for tampering. Organizations should review their own Docker Hub audit logs for any unrecognized registry activity during the two-year window.
## References
- **Docker Blog/Advisory:** hxxps[://]www[.]docker[.]com/blog/docker-hub-security-advisory-cve-2026-105445/
- **Researcher Write-up:** hxxps[://]ghostpat[.]com/
- **CVE Record:** hxxps[://]github[.]com/CVEProject/cvelistV5/blob/main/cves/2026/105xxx/CVE-2026-105445[.]json