Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS (aTLS) AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil, empty, or omitted, leaving the SEV-SNP policy ReportData unset so the verifier accepts unrelated or stale Evidence not bound to the current connection. A relying party that uses this path without an expected reportData as a trust or authorization decision can be induced to trust an unintended attestation context; a supplied non-empty reportData is still validated.
The issue is fixed in version 0.9.0.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
References 4
https://github.com/ultravioletrs/cocos/commit/80bf813c48300f02259b338b91f844c71…
security-advisories@github.com
https://github.com/ultravioletrs/cocos/pull/582
security-advisories@github.com
https://github.com/ultravioletrs/cocos/releases/tag/v0.9.0
security-advisories@github.com
https://github.com/ultravioletrs/cocos/security/advisories/GHSA-4r6g-mp48-j2rw
security-advisories@github.com