{"id":"CVE-2026-44685","kind":"vulnerability","aliases":["CVE-2026-44685"],"related":[],"title":"Intel TDX MigTD: rebinding protocol spoof lets privileged code escalate to host","description":"Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.","summary":"Intel's MigTD component, which moves confidential virtual machines between hosts under Intel TDX, has an authentication bypass in its rebinding protocol caused by spoofing. A privileged system-software attacker with local access can use it to run code at ring 0 and gain full confidentiality, integrity and availability impact.","severity":"critical","cvss":9.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"MigTD","fixed":["0.7.2"],"affected":"< 0.7.2","ecosystem":"vendor"}],"ecosystems":[],"tags":["confidential-computing","hypervisor","infrastructure","intel-tdx","migtd","self-hosted"],"not_affected_if":["managed-hosting","no-td-migration","no-tdx-migration","standard-virtualization"],"how_to_check":"Check the MigTD version/build your TDX live-migration stack uses; any MigTD reference software older than 0.7.2 is affected. Cloud users: ask your provider whether it has moved to MigTD 0.7.2 or later.","fix":"Update Intel MigTD reference software to 0.7.2 or later (https://github.com/intel/MigTD/releases/tag/v0.7.2)","status":"open","published_at":"2026-11-10T18:17:40+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","triaged_at":"2026-11-10T18:24:15+00:00","updated_at":"2026-11-10T18:25:02+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-10T18:24:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel TDX MigTD: rebinding protocol spoof lets privileged code escalate to host","impact":"high","summary":"Intel's MigTD component, which moves confidential virtual machines between hosts under Intel TDX, has an authentication bypass in its rebinding protocol caused by spoofing. A privileged system-software attacker with local access can use it to run code at ring 0 and gain full confidentiality, integrity and availability impact.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel-tdx","confidential-computing","hypervisor","migtd"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"privileged attacker runs code at ring 0 and reads or alters everything","analyst_note":"Find Intel's security advisory for CVE-2026-44685 to confirm affected MigTD versions, fixed versions and mitigations.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-tdx-migration","standard-virtualization"],"who_is_affected":"Affects hosts running Intel TDX confidential computing with the MigTD Trust Domain used for live migration. The attacker must already be a privileged user on the system software side, so ordinary tenants of cloud VMs are not the primary concern. Teams not running TDX migration can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"critical"},"cost_usd":0.000731,"input_tokens":4678,"output_tokens":526,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find Intel's security advisory for CVE-2026-44685 to confirm affected MigTD versions, fixed versions and mitigations.","search":"'-2026':14A,17A '-44685':15A,18A '0':74B,103C 'access':65B,136C 'adversari':113C 'allow':106C 'attack':62B,123C,138C 'authent':48B,83C 'avail':81B,163C,178C 'bypass':49B,84C 'caus':54B 'code':9A,71B,127C 'combin':118C 'complex':122C 'compon':35B 'comput':22B 'confidenti':21B,38B,78B,158C,173C 'confidential-comput':20B 'cve':13A,16A 'domain':99C 'enabl':125C 'escal':10A,108C 'execut':128C 'full':77B 'gain':76B 'high':159C,161C,164C,174C,176C,179C 'host':12A,31B,42B 'hypervisor':23B,104C 'impact':82B,156C,180C 'infrastructur':24B 'integr':79B,160C,175C 'intel':1A,26B,32B,44B,94C 'intel-tdx':25B 'interact':151C 'intern':145C 'knowledg':146C 'let':7A 'local':64B,126C,135C 'low':121C 'machin':40B 'may':105C,124C,131C,155C 'migrat':97C 'migtd':3A,19A,28B,34B,89C,100C 'move':37B 'occur':133C 'potenti':132C,153C 'present':142C 'privileg':8A,58B,110C,116C 'protocol':5A,53B,91C 'r':95C 'rebind':4A,52B,90C 'requir':139C,148C 'result':130C,169C 'ring':73B,102C 'run':70B 'self':30B 'self-host':29B 'softwar':61B,112C 'special':144C 'spoof':6A,56B,86C 'subsequ':171C 'system':60B,111C,168C,172C 'system-softwar':59B 'tdx':2A,27B,45B,96C 'trust':98C 'use':67B 'user':117C,150C 'via':134C 'virtual':39B 'vulner':154C,167C 'within':101C 'without':143C","nicknames":[],"mitigations":[],"who_affected":"Operators of Intel TDX hosts that live-migrate confidential VMs with Intel's MigTD reference software before 0.7.2 (cloud providers, private confidential-computing clusters). Intel describes a local attacker with privileged system software and a low-complexity attack who can bypass authentication in the MigTD rebinding protocol and run code. Teams that only consume confidential VMs from a managed provider depend on the provider patching; those not using TDX or not migrating TDs can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T18:25:02Z","by":"analyst","doc":"https://github.com/intel/MigTD/releases/tag/v0.7.2","run_id":2486},"products":{"at":"2026-11-10T18:25:02Z","by":"analyst","doc":"https://github.com/intel/MigTD/releases/tag/v0.7.2","run_id":2486},"mitigations":{"at":"2026-11-10T18:25:02Z","by":"analyst","doc":"https://github.com/intel/MigTD/releases/tag/v0.7.2","run_id":2486},"workarounds":{"at":"2026-11-10T18:25:02Z","by":"analyst","doc":"https://github.com/intel/MigTD/releases/tag/v0.7.2","run_id":2486}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["migtd"],"ptokens":["migtd"],"labels":["confidentialcomputing","critical","hypervisor","infrastructure","inteltdx","migtd","selfhosted"],"campaign_type":null,"search_a":"'-2026':14A,17A '-44685':15A,18A 'code':9A 'cve':13A,16A 'escal':10A 'host':12A 'intel':1A 'let':7A 'migtd':3A,19A 'privileg':8A 'protocol':5A 'rebind':4A 'spoof':6A 'tdx':2A","search_b":"'0':74B 'access':65B 'attack':62B 'authent':48B 'avail':81B 'bypass':49B 'caus':54B 'code':71B 'compon':35B 'comput':22B 'confidenti':21B,38B,78B 'confidential-comput':20B 'full':77B 'gain':76B 'host':31B,42B 'hypervisor':23B 'impact':82B 'infrastructur':24B 'integr':79B 'intel':26B,32B,44B 'intel-tdx':25B 'local':64B 'machin':40B 'migtd':28B,34B 'move':37B 'privileg':58B 'protocol':53B 'rebind':52B 'ring':73B 'run':70B 'self':30B 'self-host':29B 'softwar':61B 'spoof':56B 'system':60B 'system-softwar':59B 'tdx':27B,45B 'use':67B 'virtual':39B","search_c":"'0':103C 'access':136C 'adversari':113C 'allow':106C 'attack':123C,138C 'authent':83C 'avail':163C,178C 'bypass':84C 'code':127C 'combin':118C 'complex':122C 'confidenti':158C,173C 'domain':99C 'enabl':125C 'escal':108C 'execut':128C 'high':159C,161C,164C,174C,176C,179C 'hypervisor':104C 'impact':156C,180C 'integr':160C,175C 'intel':94C 'interact':151C 'intern':145C 'knowledg':146C 'local':126C,135C 'low':121C 'may':105C,124C,131C,155C 'migrat':97C 'migtd':89C,100C 'occur':133C 'potenti':132C,153C 'present':142C 'privileg':110C,116C 'protocol':91C 'r':95C 'rebind':90C 'requir':139C,148C 'result':130C,169C 'ring':102C 'softwar':112C 'special':144C 'spoof':86C 'subsequ':171C 'system':111C,168C,172C 'tdx':96C 'trust':98C 'user':117C,150C 'via':134C 'vulner':154C,167C 'within':101C 'without':143C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:40+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-44685","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44685","severity":null,"published_at":"2026-11-10T18:17:40+00:00","modified_at":"2026-11-10T18:17:40+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","fetched_at":"2026-11-10T18:22:58+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-44685:2486","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html","severity":null,"published_at":"2026-11-10T18:25:02+00:00","modified_at":"2026-11-10T18:25:02+00:00","first_seen_at":"2026-11-10T18:25:02+00:00","fetched_at":"2026-11-10T18:25:02+00:00","note":"Read Intel INTEL-SA-01580 (released 2026-11-10): CVE-2026-44685 CVSS4 9.3, local, privileged system-software attacker; all MigTD reference software before 0.7.2 affected; fix 0.7.2 (GitHub release linked, not opened by me). Advisory lists no workarounds. No exploitation or PoC stated; did not search social. how_to_check and who_affected are my wording, not verified.","cites":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html","https://github.com/intel/MigTD/releases/tag/v0.7.2"]}],"documents":[{"id":117041,"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html","title":"INTEL-SA-01580 Intel TDX Migration Trust Domain (MigTD) Advisory","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":117043,"url":"https://github.com/intel/MigTD/releases/tag/v0.7.2","title":"intel/MigTD v0.7.2","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}