A multi-year Docker Hub flaw dubbed GhostPat allowed unauthorized cross-account repository access via account conversions.
Docker patched the issue in late Septemb…
@hacks.gr
@hacks.grA multi-year Docker Hub flaw dubbed GhostPat allowed unauthorized cross-account repository access via account conversions.
Docker patched the issue in late Septemb…
@threadlinqs.bsky.socialGhostPAT: a throwaway Docker Hub token silently became the victim's - pull, push and delete images. https://intel.threadlinqs.com/threat/TL-2026-3419 #ThreatIntel #CVE_2026_105445 #GhostPAT #Docker
