CVE-2026-108266
CRITICAL
9,1
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
Description
AI Translation Available
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in privasys-v0.8.1.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0012
Percentile
0,0th
Updated
EPSS Score Trend (Last 2 Days)
346
Origin Validation Error
DraftCommon Consequences
Security Scopes Affected:
Access Control
Other
Potential Impacts:
Gain Privileges Or Assume Identity
Varies By Context
Applicable Platforms
Technologies:
Not Technology-Specific, Web Based
https://github.com/Privasys/rustls/commit/ab630583b58fee84260cbbfe2f4a8b45d8bde…
https://github.com/Privasys/rustls/releases/tag/privasys-v0.8.1
https://github.com/Privasys/rustls/security/advisories/GHSA-j6qv-435v-r492
https://privasys.org/blog/binding-attestation-to-the-tls-session