CVE-2026-129092
CCC Attestation SIG attested-tls-poc through commit 731ca82 TOCTOU via Handshake-Only Attestation
CVSS Score
5.7
EPSS Score
0.0%
EPSS Percentile
0th
CCC Attestation SIG attested-tls-poc through commit 731ca82 contains a time-of-check time-of-use vulnerability because Evidence is appraised only once during the TLS handshake, without post-handshake re-attestation. Attackers with local access to the attesting endpoint can alter workload code, data, configuration, or attached devices like GPUs while peers keep trusting the original Evidence.
| CWE | CWE-367 |
| Vendor | ccc-attestation |
| Product | attested-tls-poc |
| Published | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for ccc-attestation attested-tls-poc
Be the first to know when new medium vulnerabilities affecting ccc-attestation attested-tls-poc are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
CCC-Attestation / attested-tls-poc
0 ≤ 731ca82ed533fc7a1092be980887ae2e34261da2
References
doi.org: https://doi.org/10.1145/3779208.3785387 github.com: https://github.com/CCC-Attestation/formal-spec-id-crisis github.com: https://github.com/ionut-arm/mbedtls/blob/f4ac7593826a506fc509c83cad73786acab1d442/library/ssl_tls13_generic.c#L430-L436 github.com: https://github.com/CCC-Attestation/attested-tls-poc vulncheck.com: https://www.vulncheck.com/advisories/ccc-attestation-sig-attested-tls-poc-through-commit-731ca82-toctou-via-handshake-only-attestation
Credits
Muhammad Usama Sardar