{"id":"CVE-2026-129092","kind":"vulnerability","aliases":["CVE-2026-129092"],"related":[],"title":"CCC attested-tls-poc: TLS trust checked once, then endpoint can be altered","description":"CCC Attestation SIG attested-tls-poc through commit 731ca82 contains a time-of-check time-of-use vulnerability because Evidence is appraised only once during the TLS handshake, without post-handshake re-attestation. Attackers with local access to the attesting endpoint can alter workload code, data, configuration, or attached devices like GPUs while peers keep trusting the original Evidence.","summary":"The attested-tls-poc proof-of-concept appraises a machine's attestation Evidence only once during the TLS handshake and never again afterward. A local attacker on the attesting endpoint can change workload code, data, configuration or attached devices such as GPUs while peers keep trusting the original Evidence.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"attested-tls-poc","fixed":[],"affected":"<= 731ca82ed533fc7a1092be980887ae2e34261da2 (all commits)","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["archived","attested-tls-poc","confidential-computing","other","tls-attestation"],"not_affected_if":["not-using-attested-tls-poc"],"how_to_check":"Check whether your code or build depends on or vendors CCC-Attestation/attested-tls-poc (any commit up to 731ca82ed533fc7a1092be980887ae2e34261da2, i.e. all of it, since the last commit was Oct 2023): search repos, submodules and Dockerfiles for that repository URL.","fix":"No fix: the project is archived and marked defunct by its maintainers, who advise against using the design or implementation. Move to IETF SEAT working group designs with post-handshake attestation.","status":"open","published_at":"2026-11-13T15:17:45+00:00","first_seen_at":"2026-11-13T15:46:20+00:00","triaged_at":"2026-11-13T15:48:41+00:00","updated_at":"2026-11-13T15:49:43+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-11-13T15:48:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"CCC attested-tls-poc: TLS trust checked once, then endpoint can be altered","impact":"high","summary":"The attested-tls-poc proof-of-concept appraises a machine's attestation Evidence only once during the TLS handshake and never again afterward. A local attacker on the attesting endpoint can change workload code, data, configuration or attached devices such as GPUs while peers keep trusting the original Evidence.","audience":"developers","category":"other","nicknames":[],"who_cares":["attested-tls-poc","confidential-computing","tls-attestation"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local attacker alters workload while peers still trust it","analyst_note":"Confirm the affected repository and whether a fixed commit exists; check the VulnCheck advisory at www.vulncheck.com for fix details and how_to_check guidance.","how_to_check":"unknown","plain_action":"","product_name":"attested-tls-poc","needs_analyst":true,"not_affected_if":["not-using-attested-tls-poc"],"who_is_affected":"Affects deployments of attested-tls-poc through commit 731ca82 that rely on TLS attestation to trust a workload. The sources do not say which systems use it beyond this proof-of-concept, so the exposure of other products is unknown. Teams not running this code can skip it.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000732,"input_tokens":4613,"output_tokens":541,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm the affected repository and whether a fixed commit exists; check the VulnCheck advisory at www.vulncheck.com for fix details and how_to_check guidance.","search":"'-129092':17A,20A '-2026':16A,19A '731ca82':97C 'access':129C 'afterward':61B 'alter':14A,135C 'apprais':46B,112C 'archiv':25B 'attach':76B,141C 'attack':64B,126C 'attest':3A,27B,36B,39B,50B,67B,89C,92C,125C,132C 'attested':22A 'attested-tls-poc':2A,21A,26B,38B,91C 'ccc':1A,88C 'chang':70B 'check':8A,103C 'code':72B,137C 'commit':96C 'comput':32B 'concept':45B 'confidenti':31B 'confidential-comput':30B 'configur':74B,139C 'contain':98C 'cve':15A,18A 'data':73B,138C 'devic':77B,142C 'endpoint':11A,68B,133C 'evid':51B,87B,110C,151C 'gpus':80B,144C 'handshak':57B,118C,122C 'keep':83B,147C 'like':143C 'local':63B,128C 'machin':48B 'never':59B 'origin':86B,150C 'peer':82B,146C 'poc':5A,24A,29B,41B,94C 'post':121C 'post-handshak':120C 'proof':43B 'proof-of-concept':42B 're':124C 're-attest':123C 'sig':90C 'time':101C,105C 'time-of-check':100C 'time-of-us':104C 'tls':4A,6A,23A,28B,35B,40B,56B,93C,117C 'tls-attest':34B 'trust':7A,84B,148C 'use':107C 'vulner':108C 'without':119C 'workload':71B,136C","nicknames":[],"mitigations":[],"who_affected":"Anyone running the attested-tls-poc proof-of-concept (commits up to 731ca82) to trust a workload via TLS attestation. An attacker needs local, privileged access to the attesting machine to change code, data, config or GPUs after the handshake while peers still trust the original Evidence. Teams not using this archived research code can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-13T15:49:43Z","by":"analyst","doc":"https://www.vulncheck.com/advisories/ccc-attestation-sig-attested-tls-poc-through-commit-731ca82-toctou-via-handshake-only-attestation","run_id":3892},"products":{"at":"2026-11-13T15:49:43Z","by":"analyst","doc":"https://www.vulncheck.com/advisories/ccc-attestation-sig-attested-tls-poc-through-commit-731ca82-toctou-via-handshake-only-attestation","run_id":3892}},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":["attestedtlspoc"],"ptokens":["attested","poc","tls"],"labels":["archived","attestedtlspoc","confidentialcomputing","high","other","tlsattestation","vendor"],"campaign_type":null,"search_a":"'-129092':17A,20A '-2026':16A,19A 'alter':14A 'attest':3A 'attested':22A 'attested-tls-poc':2A,21A 'ccc':1A 'check':8A 'cve':15A,18A 'endpoint':11A 'poc':5A,24A 'tls':4A,6A,23A 'trust':7A","search_b":"'afterward':61B 'apprais':46B 'archiv':25B 'attach':76B 'attack':64B 'attest':27B,36B,39B,50B,67B 'attested-tls-poc':26B,38B 'chang':70B 'code':72B 'comput':32B 'concept':45B 'confidenti':31B 'confidential-comput':30B 'configur':74B 'data':73B 'devic':77B 'endpoint':68B 'evid':51B,87B 'gpus':80B 'handshak':57B 'keep':83B 'local':63B 'machin':48B 'never':59B 'origin':86B 'peer':82B 'poc':29B,41B 'proof':43B 'proof-of-concept':42B 'tls':28B,35B,40B,56B 'tls-attest':34B 'trust':84B 'workload':71B","search_c":"'731ca82':97C 'access':129C 'alter':135C 'apprais':112C 'attach':141C 'attack':126C 'attest':89C,92C,125C,132C 'attested-tls-poc':91C 'ccc':88C 'check':103C 'code':137C 'commit':96C 'configur':139C 'contain':98C 'data':138C 'devic':142C 'endpoint':133C 'evid':110C,151C 'gpus':144C 'handshak':118C,122C 'keep':147C 'like':143C 'local':128C 'origin':150C 'peer':146C 'poc':94C 'post':121C 'post-handshak':120C 're':124C 're-attest':123C 'sig':90C 'time':101C,105C 'time-of-check':100C 'time-of-us':104C 'tls':93C,117C 'trust':148C 'use':107C 'vulner':108C 'without':119C 'workload':136C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T15:17:45+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-129092","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-129092","severity":null,"published_at":"2026-11-13T15:17:45+00:00","modified_at":"2026-11-13T15:17:45+00:00","first_seen_at":"2026-11-13T15:46:20+00:00","fetched_at":"2026-11-13T15:46:20+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-129092:3892","url":"https://github.com/CCC-Attestation/attested-tls-poc","severity":null,"published_at":"2026-11-13T15:49:43+00:00","modified_at":"2026-11-13T15:49:43+00:00","first_seen_at":"2026-11-13T15:49:43+00:00","fetched_at":"2026-11-13T15:49:43+00:00","note":"VulnCheck advisory read (affects <= 731ca82ed533fc7a1092be980887ae2e34261da2); repo README says project defunct, archived Jul 2026, no fix planned, advise against use. No PoC/exploitation found.","cites":["https://github.com/CCC-Attestation/attested-tls-poc"]}],"documents":[{"id":147265,"url":"https://www.vulncheck.com/advisories/ccc-attestation-sig-attested-tls-poc-through-commit-731ca82-toctou-via-handshake-only-attestation","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"},{"id":147273,"url":"https://github.com/CCC-Attestation/attested-tls-poc","title":"CCC-Attestation/attested-tls-poc README (defunct, archived)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}