CVE-2026-92701 Details

A session-misbinding vulnerability has been identified in Cocos AI versions through 0.8.2, specifically within the intra-handshake attestation implementation of attested TLS (aTLS) for the Intel TDX verification path. The issue arises because the verifier does not properly copy the current-session freshness value into the TDX quote-body policy before validation. This oversight allows structurally valid TDX QuoteV4 Evidence to be accepted without ensuring that the REPORT_DATA field aligns with the expected reportData for the current session. Consequently, a relying party could accept Evidence with mismatched or reused reportData and inadvertently release application data after the handshake, misbinding the session to an unintended attestation context.

Users are advised to upgrade to Cocos AI version 0.9.0 or later, where this vulnerability has been addressed by migrating from intra-handshake attestation to post-handshake attestation. For those unable to upgrade, a temporary workaround is to manually validate the TDX quote-body policy freshness before accepting Evidence and releasing application data.