CVE-2026-119345: fallo de gravedad alta en ultravioletrs cocos
Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.2epss 0.1%
Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep the existing connection open while the peer continues trusting stale initial Evidence. This gap is especially significant for long-lived connections because the verifier has no mechanism to detect the changed state. This issue is fixed in version 0.9.0.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
ultravioletrs · cocosCVEs relacionadas — ultravioletrs cocos
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-119344CRITICALCocos Intra-handshake attested TLS implementation is vulnerable to Diversion AttacksEPSS 0.3%CVE-2026-92702CRITICALCocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP pathEPSS 0.3%CVE-2026-92701CRITICALCocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier pathEPSS 0.2%CVE-2026-33697HIGHCoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keysEPSS 0.1%