---
title: Tip: prune Docker Hub personal access tokens and move CI to organization access tokens | ctxsec
url: https://ctxsec.com/items/tip-docker-hub-pat-review
description: ""
status: "how-to"
published: 2026-10-15
---

> 

[← Tips & Guides](/tips) · [markdown](/items/tip-docker-hub-pat-review.md)

how-to

2026-10-15

### Tip: prune Docker Hub personal access tokens and move CI to organization access tokens

Following CVE-2026-105445, Docker recommends reviewing personal access tokens under Account settings, Personal access tokens, and revoking any you don't recognize or no longer use, and checking for unfamiliar organization memberships. For CI and other automation that belongs to an organization, use organization access tokens instead of a person's PAT, so a token's power isn't tied to one human account. If you got Docker's Oct 2 email ("Docker Hub Vulnerability Identified & Resolved"), the listed tokens were deactivated Oct 8 unless you opted out.

Sources: [Docker security advisory](https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/)