CVE-2026-105445: Docker Hub, заобикаляне на вход и права

Описание

Оригинално описание

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then authenticated to the registry as the recipient and could pull, push, or delete images, within its scopes, in repositories accessible to that user, including organization repositories.

Засегнати продукти

• Docker Docker Hub: 2024-08-26T20:33:00Z преди 2026-09-30T19:10:00Z

Вид слабост

• CWE-266 Неправилно задаване на привилегии

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-105445
• https://nvd.nist.gov/vuln/detail/CVE-2026-105445
• https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/
• https://docs.docker.com/accounts/organization/setup/convert-account/
• https://ghostpat.com/