CVE-2026-108268 Details
Description
Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in tdx-v0.2.43 and tdx-gpu-v0.6.27.
A vulnerability exists in Privasys Enclave OS Virtual versions through tdx-v0.2.35 and tdx-gpu-v0.6.26-dev, where the RA-TLS certificate issuer for the TDX runtime failed to properly bind challenge certificates to the active TLS session. This flaw allows an attacker with access to the enclave's TLS private key to relay a genuine quote to a relying party, misrepresenting an attacker-terminated connection as an attested one. The vulnerability arises because the quote ReportData did not include a value tied to the current TLS session, leaving a gap that could be exploited under specific conditions.
Users can upgrade to Enclave OS Virtual versions tdx-v0.2.43 or tdx-gpu-v0.6.27 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 9, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Privasys/enclave-os-virtual/commit/9a6be91e29f2b6738d0b77c33cd1ad5cd3d8a347 | [email protected] | Source CodeVendor |
| https://github.com/Privasys/enclave-os-virtual/releases/tag/tdx-gpu-v0.6.27 | [email protected] | Release NotesVendor |
| https://github.com/Privasys/enclave-os-virtual/releases/tag/tdx-v0.2.43 | [email protected] | Release NotesVendor |
| https://github.com/Privasys/enclave-os-virtual/security/advisories/GHSA-p5fp-g94g-g9m9 | [email protected] | AdvisoryRemedyVendor |
| https://privasys.org/blog/binding-attestation-to-the-tls-session | [email protected] | Technical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-346 | Origin Validation Error | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Privasys enclave-os-virtual | <= tdx-v0.2.35 <= tdx-gpu-v0.6.26-dev |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 9, 2026 | New CVE Received | [email protected] |