Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-119345— Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

Quick assessment

Affected
ultravioletrs cocos
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cocos AI 是一个面向人工智能的机密计算系统。在 0.9.0 版本之前，Cocos AI 仅在建立经过证明的 TLS 连接时执行一次证明（attestation）。如果攻击者能够在该检查之后修改证明器（attester）的工作负载代码、内存驻留状态、配置或附加设备，则可以在保持现有连接的同时，使对端继续信任过时的初始证据（Evidence）。此漏洞在长生命周期连接中尤为严重，因为验证方缺乏检测状态变更的机制。该问题已在 0.9.0 版本中修复。

CVSS 7.2 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
ultravioletrs cocos < 0.9.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-119345

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
Source: CVE Program / CVE List V5
Vulnerability Description
Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep the existing connection open while the peer continues trusting stale initial Evidence. This gap is especially significant for long-lived connections because the verifier has no mechanism to detect the changed state. This issue is fixed in version 0.9.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
ultravioletrs cocos < 0.9.0 -

II. Public POCs for CVE-2026-119345

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-119345

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-119345 (1)

Other References for CVE-2026-119345 (1)

Other References for CVE-2026-119345 (1)

IV. Related Vulnerabilities

Same product: cocos
Same vendor: ultravioletrs
Same weakness: CWE-367