A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature thatconverts a personal accountinto an organization, Docker said in asecurity advisoryon October 12.
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
The Hacker News - 13 Oct 2026 23:33
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature thatconverts a personal accountinto an organization, Docker said in asecurity advisoryon October 12.
Share this Article
Recommended