"I know, but...I think he stole some polyjuice potion from Slughorn’s class," Harry said before going on to explain his belief about Draco convincing both Crabbe and Goyle to disguise as girls. Specifically so he could use the Room of Requirements.