CVE-2026-92701criticalCWE-346CWE-354

CVE-2026-92701: fallo crítico en ultravioletrs cocos

Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear cocos

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 0.2%
de la publicación al armael mismo día
Publicada en NVD18 sept
1ª PoC6 jul
Cocos AI is a confidential computing system for AI. In Cocos AI 0.8.2 and earlier, VerifTeeAttestation in the Intel TDX aTLS verifier receives an expected current-session value but does not apply it to TdQuoteBodyPolicy.ReportData before validating TDX QuoteV4 evidence. The verifier can consequently accept structurally valid evidence containing mismatched or reused REPORT_DATA for the current TLS session, causing the relying party to release application data or make a trust or authorization decision for an unrelated attestation context. This issue was fixed in Cocos AI 0.9.0 by removing the affected verifier path as part of the migration to post-handshake attestation.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Productos afectados
ultravioletrs · cocos
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — ultravioletrs cocos

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-119344CRITICALCocos Intra-handshake attested TLS implementation is vulnerable to Diversion AttacksEPSS 0.3%CVE-2026-92702CRITICALCocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP pathEPSS 0.3%CVE-2026-119345HIGHCocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU AttacksEPSS 0.1%CVE-2026-33697HIGHCoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keysEPSS 0.1%