Critical Docker Hub Flaw Allowed Unauthorized Image Manipulation

Docker has patched a critical two-year-old vulnerability in Docker Hub that permitted users to push, pull, or delete container images belonging to other accounts. The flaw stemmed from the account conversion feature for personal profiles and organizations. Docker reported no evidence of active exploitation prior to the fix.