# Docker Hub GhostPat flaw let account conversion hand access tokens to any victim

Source: https://startwithidentity.com/blog/2026-10-12-docker-hub-ghostpat-flaw-let-account-conversion-hand-tokens-to-any-victim/
Last updated: 2026-10-12
License: content by Start with Identity. Cite the source URL.

---

Docker published an advisory on October 12 for CVE-2026-105445, nicknamed GhostPat (CVSS 4.0 score 9.4), a Docker Hub flaw open from August 26, 2024 until a fix on September 30, 2026. When a personal account was converted into an organization, its personal access tokens (PATs) were transferred to the user named as the organization's owner: the recorded owner changed, the token secret did not, and the named owner was neither asked nor told. An attacker could create a token on an account they controlled, convert it, name a victim as owner, and use the same token against the registry as the victim. Access stopped at the registry, with no web login or account changes. Docker reviewed about 304,000 pushes made with transferred tokens, found no evidence of exploitation, and deactivated transferred tokens on October 8. Peter Molnar and Krisztian Hozak reported it.

## Why it matters

A [bearer token](https://startwithidentity.com/glossary/bearer-token/) is whoever the server's database says it belongs to. GhostPat changed that record without changing the secret, so a credential the attacker already held quietly became the victim's. Ownership transfer is an identity event and needs the same consent and notification as a password change.

Docker now requires consent before naming an owner, notifies the user, and logs ownership changes. If Docker did not email you on October 2, you were not exposed. Otherwise, review and revoke unrecognized PATs, check the account switcher for organizations you never joined, and review push activity in organization logs. For CI, use organization access tokens rather than a person's PAT, and sign images so a push alone cannot ship code. For your own SaaS, test what happens to tokens on account merges, conversions and transfers; that path is easy to miss in reviews.

Source: [Docker](https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/)