---
id: "CVE-2026-61887"
page: "https://infrastack.ai/live/CVE-2026-61887"
kind: "vulnerability"
aliases: ["CVE-2026-61887"]
title: "Intel TDX MigTD: missing authentication step lets attackers escalate privileges"
severity: "critical"
cvss: 9.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Intel TDX Migration Trust Domain (MigTD)", "fixed": ["0.7.2"], "affected": "< 0.7.2", "ecosystem": "vendor"}]
ecosystems: []
tags: ["confidential-computing", "hypervisor", "infrastructure", "intel-tdx", "migtd"]
not_affected_if: ["no-intel-tdx", "no-migtd"]
published_at: "2026-11-10T18:17:44+00:00"
first_seen_at: "2026-11-10T18:23:00+00:00"
updated_at: "2026-11-10T18:24:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61887", "first_seen_at": "2026-11-10T18:23:00+00:00"}, {"source": "analyst", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", "first_seen_at": "2026-11-10T18:24:50+00:00", "cites": ["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html"]}]
exploit_sources: []
---

# Intel TDX MigTD: missing authentication step lets attackers escalate privileges

Link for people: https://infrastack.ai/live/CVE-2026-61887 (this .md is for agents)

The MigTD SPDM rebind implementation in Intel's TDX Migration Trust Domain skips a required authentication step. A network attacker without an account could potentially escalate privileges, read information, or run code on the affected system.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Intel TDX Migration Trust Domain (MigTD) affected < 0.7.2 fixed 0.7.2

## How to check

Check the MigTD build/version you deploy (the MigTD binary or reference-software release your platform vendor ships). Any version before 0.7.2 is affected. Also check your hypervisor/cloud vendor's firmware notes if MigTD is bundled.

## Fix

Update Intel TDX Migration Trust Domain (MigTD) reference software to version 0.7.2 or later (GitHub release v0.7.2), per INTEL-SA-01580.

## Timeline

- 2026-11-10T18:23:00+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-61887
- 2026-11-10T18:24:50+00:00 analyst https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html — Read Intel INTEL-SA-01580 (primary): all MigTD reference software before 0.7.2 affected, fixed in 0.7.2; Intel lists no workarounds. Advisory rates overall MEDIUM but this CVE is CVSS4 9.4 (AV:A/PR:N). No exploitation or PoC seen; no social search done. Advisory page was truncated in web-cli; read via WebFetch.

## Documents

- [advisory] INTEL-SA-01580 Intel TDX Migration Trust Domain (MigTD) Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

## From the sources

Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. Network adversary with an unauthenticated user combined with a low complexity attack may enable remote code execution. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_