CVE-2026-108265 enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session
Attackers can bypass remote attestation in SGX enclaves by relaying quotes, allowing them to impersonate the enclave to relying parties.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-108265?
CVE-2026-108265 is a critical vulnerability in Privasys enclave-os-mini, published on 9 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in wasm-v0.40.0.
Weakness: CWE-346
Which versions are affected by CVE-2026-108265?
How do I fix CVE-2026-108265?
No fix has been published for CVE-2026-108265 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-108265 being exploited?
There is no known exploitation of CVE-2026-108265 in the wild and no public exploit code.
Sources
Also known as GHSA-49qm-4pj3-w2c6.