Privasys vulnerabilities

Products

• ra-tls-clients 3
• enclave-os-mini 1
• enclave-os-virtual 1
• go 1
• rustls 1

Latest Privasys CVEs

Newest publication first

1. CVE-2026-108361 Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

   Published 2026-10-12

   High·CVSS 7.2 EPSS 0.08%

   Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successful connection establishment. Once Evidence w...

2. CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

   Published 2026-10-12

   Critical·CVSS 9.1 EPSS 0.16%

   Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker c...

3. CVE-2026-108269 ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session

   Published 2026-10-09

   Critical·CVSS 9.1 EPSS 0.13%

   Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS se...

4. CVE-2026-108268 enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session

   Published 2026-10-09

   Critical·CVSS 9.1 EPSS 0.13%

   Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a...

5. CVE-2026-108267 Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

   Published 2026-10-09

   Critical·CVSS 9.1 EPSS 0.12%

   Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. A...

6. CVE-2026-108266 Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

   Published 2026-10-09

   Critical·CVSS 9.1 EPSS 0.12%

   Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not...

7. CVE-2026-108265 enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session

   Published 2026-10-09

   Critical·CVSS 9.1 EPSS 0.12%

   Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.