CVE-2026-92701 Details
Description
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS (aTLS) Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body policy before quote validation, so structurally valid TDX QuoteV4 Evidence is accepted without checking that its REPORT_DATA field matches the reportData expected for the current session. A relying party using this path can therefore accept Evidence with a mismatched or reused reportData and release application data after the handshake, enabling session-misbinding to an unintended attestation context. The issue is fixed in version 0.9.0.
A session-misbinding vulnerability has been identified in Cocos AI versions through 0.8.2, specifically within the intra-handshake attestation implementation of attested TLS (aTLS) for the Intel TDX verification path. The issue arises because the verifier does not properly copy the current-session freshness value into the TDX quote-body policy before validation. This oversight allows structurally valid TDX QuoteV4 Evidence to be accepted without ensuring that the REPORT_DATA field aligns with the expected reportData for the current session. Consequently, a relying party could accept Evidence with mismatched or reused reportData and inadvertently release application data after the handshake, misbinding the session to an unintended attestation context.
Users are advised to upgrade to Cocos AI version 0.9.0 or later, where this vulnerability has been addressed by migrating from intra-handshake attestation to post-handshake attestation. For those unable to upgrade, a temporary workaround is to manually validate the TDX quote-body policy freshness before accepting Evidence and releasing application data.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 18, 2026CISA-ADP
Assessed Sep 18, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ultravioletrs/cocos/security/advisories/GHSA-4px3-wj2x-xx47 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/ultravioletrs/cocos/releases/tag/v0.9.0 | [email protected] | Release NotesVendor |
| https://github.com/ultravioletrs/cocos/security/advisories/GHSA-4px3-wj2x-xx47 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-346 | Origin Validation Error | [email protected] |
| CWE-354 | Improper Validation of Integrity Check Value | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Ultravioletrs Cocos | <= 0.8.2 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 21, 2026 | CVE Modified | [email protected] |
| Sep 18, 2026 | CVE Modified | CISA-ADP |
| Sep 18, 2026 | New CVE Received | [email protected] |