Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

vulnerability

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

A two-year-old flaw in Docker Hub allowed one user to push, pull, or delete images as another user through account conversions. Docker quickly fixed the issue, and investigation found no evidence of exploitation. Docker…

The Hacker News · 1d ago HighCVSS 9.4

CVE-2026-105445 docker vulnerability account-conversion

vulnerability

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

A critical Remote Code Execution (RCE) vulnerability in Langflow, version prior to 1.9.0, has been actively exploited by threat actors. Attackers are leveraging a crafted HTTP POST request to add malicious MCP servers, l…

The Hacker News · 7h ago CriticalCVSS 9.9ExploitedEPSS 29%

CVE-2026-105740 CVE-2026-69255 CVE-2026-55255 BE CH GE rce langflow authentication

news.mlab.sh

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts