Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-119344— Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks

Quick assessment

Affected
ultravioletrs cocos
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cocos AI 是一个面向人工智能的机密计算系统。在 0.8.2 及更早版本中，Cocos AI 会在固件补丁级别和软件度量值匹配时接受可信执行环境（TEE）的认证证据（Attestation Evidence），但未将该证据与允许的平台所有者或唯一的机器身份进行绑定，也未实施撤销机制。若远程攻击者能够控制或入侵另一个被同一验证器信任的平台，则可以从该平台替换出有效的认证证据，从而导致对错误平台的授权。该漏洞已在 0.9.0 版本中得到修复。然而，由于此漏洞源于机密计算本身的威胁模型，仅通过源代码修补无法彻底解决

CVSS 9.1 · Critical

Affected Version Matrix 1

VendorProduct Version RangeStatus
ultravioletrs cocos <= 0.8.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-119344

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks
Source: CVE Program / CVE List V5
Vulnerability Description
Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment attestation Evidence when firmware patch levels and software measurements match, without binding the Evidence to an allowed platform owner or unique machine identity and without enforcing revocation. A remote attacker who controls or compromises another platform trusted by the same verifier can substitute valid Evidence from that platform and cause authorization of the wrong platform. This vulnerability is addressed in 0.9.0. However, this vulnerability can't be patched in source code alone, since the vulnerability arises from the confidential computing threat model itself.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
ultravioletrs cocos <= 0.8.2 -

II. Public POCs for CVE-2026-119344

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-119344

请登录查看更多情报信息。

Other References for CVE-2026-119344 (1)

Other References for CVE-2026-119344 (4)

IV. Related Vulnerabilities

Same product: cocos
Same vendor: ultravioletrs
Same weakness: CWE-346