CVE-2026-108265 Details
Description
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in wasm-v0.40.0.
A vulnerability exists in Enclave OS Mini versions through wasm-v0.39.0, where the SGX runtime's RA-TLS challenge certificates did not properly bind to the active TLS session. This flaw allowed an attacker with access to the enclave's TLS private key to relay a genuine quote to another connection, misleading a relying party into believing it was communicating with the attested enclave. The issue has been addressed in version wasm-v0.40.0.
Users are advised to upgrade to Enclave OS Mini version wasm-v0.40.0 or later.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 9, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Privasys/enclave-os-mini/commit/9f541c849ef733d2df2851a666f359d01dcdcb8e | [email protected] | Source CodeVendor |
| https://github.com/Privasys/enclave-os-mini/releases/tag/wasm-v0.40.0 | [email protected] | Release NotesVendor |
| https://github.com/Privasys/enclave-os-mini/security/advisories/GHSA-49qm-4pj3-w2c6 | [email protected] | AdvisoryRemedyVendor |
| https://privasys.org/blog/binding-attestation-to-the-tls-session | [email protected] | Technical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-346 | Origin Validation Error | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Privasys Enclave OS Mini | <= wasm-v0.39.0 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 9, 2026 | New CVE Received | [email protected] |