Vulnerability details

CVE-2026-108362

Privasys ra-tls-clients

Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

CVSS 4.0

9.1Critical

Official description

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence or extract attestation secrets from a compromised unrevoked platform, the verifier accepts valid measurements from a different unrevoked TEE platform as though they came from the intended Attester. The attacker can impersonate the attested TLS endpoint. This issue is fixed in version 0.11.0.

CVSS scores

Score	Version	Source	Vector
9.1Critical	4.0	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N`

Affected products

Vendor	Product	Versions	Source
Privasys	ra-tls-clients	< 0.11.0	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/Privasys/ra-tls-clients/security/advisories/GHSA-pj2x-5wqv-fh57 x_refsource_CONFIRM
https://github.com/Privasys/ra-tls-clients/commit/1179ed097fdcb8519a85973a8a6c6ccbd0f50b03 x_refsource_MISC
https://github.com/Privasys/ra-tls-clients/releases/tag/v0.11.0 x_refsource_MISC

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-10-12
Last updated: 2026-10-13
State: Published
Assigner (CNA): GitHub_M
Kolun priority: 15 · Low

Exploit prediction (EPSS)

0.15%

Probability of exploitation in 30 days

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-346
Origin Validation Error