MIGTD · CVE-2026-44685 · Infrastructure
FIX → 0.7.2 ✓ verified
Intel's MigTD component, which moves confidential virtual machines between hosts under Intel TDX, has an authentication bypass in its rebinding protocol caused by spoofing. A privileged system-software attacker with local access can use it to run code at ring 0 and gain full confidentiality, integrity and availability impact.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Operators of Intel TDX hosts that live-migrate confidential VMs with Intel's MigTD reference software before 0.7.2 (cloud providers, private confidential-computing clusters). Intel describes a local attacker with privileged system software and a low-complexity attack who can bypass authentication in the MigTD rebinding protocol and run code. Teams that only consume confidential VMs from a managed provider depend on the provider patching; those not using TDX or not migrating TDs can skip it.
Not affected if managed-hosting, no-td-migration, no-tdx-migration, standard-virtualization
Who cares confidential-computing, hypervisor, intel-tdx, migtd, self-hosted
0.7.2 is affected0.7.2 or laterUpgrade to 0.7.2
Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Update Intel MigTD reference software to 0.7.2 or later (https://github.com/intel/MigTD/releases/tag/v0.7.2)
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.