---
id: "CVE-2026-57893"
page: "https://infrastack.ai/live/CVE-2026-57893"
kind: "vulnerability"
aliases: ["CVE-2026-57893"]
title: "Intel TDX MigTD: SPDM responder state flaw lets a hypervisor escalate privilege"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["confidential-computing", "hypervisor", "infrastructure", "intel-tdx"]
not_affected_if: []
published_at: "2026-11-10T18:17:42+00:00"
first_seen_at: "2026-11-10T18:22:59+00:00"
updated_at: "2026-11-10T18:24:41+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57893", "first_seen_at": "2026-11-10T18:22:59+00:00"}]
exploit_sources: []
---

# Intel TDX MigTD: SPDM responder state flaw lets a hypervisor escalate privilege

Link for people: https://infrastack.ai/live/CVE-2026-57893 (this .md is for agents)

The Intel TDX Migration Trust Domain (MigTD) SPDM responder does not correctly distinguish its internal state, which can let a hypervisor or a privileged system-software attacker escalate privilege and corrupt data. The attack needs adjacent access and a privileged user, and the sources describe high integrity impact with no confidentiality or availability impact.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T18:22:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-57893

## From the sources

Incomplete internal state distinction in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_