Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions

T1Covered by 1 source · first reported by Docker / HashiCorp / Grafana / Datadog / Honeycomb / Fly.io at 12 Oct, 16:00 UTC

CVE-2026-105445: Docker Hub account conversion could re-assign personal access tokens to a new owner. Read what happened, who was affected, and the fix.

security

Sources

• T1Docker Hub security advisory: personal access tokens transferred during account-to-organization conversionsDocker / HashiCorp / Grafana / Datadog / Honeycomb / Fly.io12 Oct, 16:00

Vulnerabilities

• CVE-2026-105445