← Back to search

CVE-2026-92701

9.1 CRITICALpublic exploit available

Published 2026-09-18 · Updated 2026-09-24

AI risk analysis

Summary
The flaw in Cocos AI allows a relying party to accept a TDX QuoteV4 Evidence with mismatched or reused reportData, enabling session-misbinding and potential unauthorized access to application data.
Exploitability
Exploitation requires control over the TLS handshake process and knowledge of the affected TDX version. Precondition is access to the TLS communication path.
Blast radius
If exploited, this could lead to unauthorized access to sensitive application data within the trusted execution environment.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Cocos AI version 0.9.0 or later.
auth-bypasstlstdxattestationtrusted-execution

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS (aTLS) Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body policy before quote validation, so structurally valid TDX QuoteV4 Evidence is accepted without checking that its REPORT_DATA field matches the reportData expected for the current session. A relying party using this path can therefore accept Evidence with a mismatched or reused reportData and release application data after the handshake, enabling session-misbinding to an unintended attestation context. The issue is fixed in version 0.9.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-346, CWE-354

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.