{"id":"CVE-2026-108362","summary":"Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)","details":"Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence or extract attestation secrets from a compromised unrevoked platform, the verifier accepts valid measurements from a different unrevoked TEE platform as though they came from the intended Attester. The attacker can impersonate the attested TLS endpoint. This issue is fixed in version 0.11.0.","aliases":["GHSA-pj2x-5wqv-fh57"],"modified":"2026-10-14T02:46:37.765116584Z","published":"2026-10-12T19:06:11.348Z","database_specific":{"cwe_ids":["CWE-346"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108362.json","cna_assigner":"GitHub_M"},"references":[{"type":"WEB","url":"https://github.com/Privasys/ra-tls-clients/releases/tag/v0.11.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108362.json"},{"type":"ADVISORY","url":"https://github.com/Privasys/ra-tls-clients/security/advisories/GHSA-pj2x-5wqv-fh57"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108362"},{"type":"FIX","url":"https://github.com/Privasys/ra-tls-clients/commit/1179ed097fdcb8519a85973a8a6c6ccbd0f50b03"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/privasys/ra-tls-clients","events":[{"introduced":"0"},{"fixed":"1179ed097fdcb8519a85973a8a6c6ccbd0f50b03"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0"},{"fixed":"0.11.0"}]}}],"versions":["v0.10.1","v0.10.0","v0.9.1","v0.9.0","v0.8.0","v0.7.7","v0.7.6","v0.7.5","v0.7.4","v0.7.3","v0.7.2","v0.7.1","v0.7.0","v0.6.3","v0.6.2","v0.6.1","v0.6.0","v0.5.0","v0.4.9","v0.4.8","v0.4.7","v0.4.6","v0.4.5","v0.4.4","v0.4.3","v0.4.2","v0.4.1","v0.4.0","v0.3.0","v0.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-108362.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}]}