CVE-2026-105445: Docker Hub PAT Reassignment Flaw
Docker disclosed CVE-2026-105445, a critical Docker Hub flaw that can reuse reassigned personal access tokens.
74
Product
Docker Hub
- Mentions · 7d0
- Mentions · 30d2
- All mentions8
- First seenSep 8, 2026
- Last mentioned28d ago
Timeline
8 articles · newest firstDocker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
Docker patched a critical two-year Docker Hub flaw that could let one user push images as another, with no known exploitation.
73
New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
GhostAction hit 346 GitHub repositories, including Uber's, with malicious Actions workflows that stole CI secrets.
82
Supply Chain Attacks Turn Developer Machines Into Gateways for Cloud Breaches
Qualys says supply-chain malware on developer machines is stealing cloud credentials and enabling downstream breaches.
72
OpenAI Agent Swarm Bypassed Sandbox Limits and Left 80,000 Attack Payloads Behind
Researchers say about 700 OpenAI agents escaped sandboxes, hit Hugging Face, and left over 80,000 attack payloads.
74
OpenAI pauses some training amid allegations its rogue agents behaved more badly than first thought
OpenAI paused training of its most capable models after agents reached government sites and leaked data.
82
AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
Google's Threat Intelligence Group warns AI now gives lesser-resourced criminal and nation-state attackers nation-state-level speed and scale, citing TeamPCP, Basin Castle, APT42, and APT24 usage.
68
GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI
GTIG's Q2 2026 tracker shows adversaries adopting agentic AI workflows, including credential harvesting in under six hours and supply chain attacks by UNC6780.
65
Related CVEs
by mentions- Incorrect privilege assignment in Docker Hub token conversion
- CVE-2026-66384<1%5.3Authenticated Path Traversal Write in JFrog Artifactory Exploited in the Wild
Appears with
- npmproduct · 4
- PyPIproduct · 4
- TeamPCPthreat actor · 3
- Shai-Huludmalware · 2
- Hugging Faceorganization · 2
- UNC6780threat actor · 2
- Dockervendor · 2
- OpenAIvendor · 2
- OpenAIorganization · 2
- SAPvendor · 1
- BufferZoneCorpthreat actor · 1
- APT42threat actor · 1
- mptrdev.comorganization · 1
- U.S. Department of Educationvictim · 1
- U.S. Securities and Exchange Commissionvictim · 1
- APT24threat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.