CVE-2026-108268

Received Received - Intake

Session Replay via TDX Quote Relay in Enclave OS Virtual

Publication date: 2026-10-09

Last updated on: 2026-10-09

Assigner: GitHub, Inc.

Description

Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in tdx-v0.2.43 and tdx-gpu-v0.6.27.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-09

Last Modified

2026-10-09

Generated

2026-10-10

AI Q&A

2026-10-10

EPSS Evaluated

N/A

NVD

CVE-2026-108268

Affected Vendors & Products

Vendor	Product	Version / Range
Privasys	enclave-os-virtual	< tdx-v0.2.43
Privasys	enclave-os-virtual	< tdx-gpu-v0.6.27

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-346	The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

Executive Summary

This vulnerability affects Enclave OS Virtual, which runs container workloads in confidential virtual machines with attestation. Before versions tdx-v0.2.43 and tdx-gpu-v0.6.27, the certificate issuer did not properly bind the TLS session to the quote ReportData. An attacker with an enclave TLS private key could replay a genuine quote to impersonate the attested enclave on another connection.

Impact Analysis

If exploited, an attacker could trick relying parties into accepting a malicious connection as a legitimate attested enclave. This could lead to unauthorized access, data breaches, or man-in-the-middle attacks, compromising the confidentiality and integrity of sensitive workloads.

Compliance Impact

This vulnerability could violate compliance requirements that mandate strong attestation and secure communication for sensitive data, such as GDPR's data protection principles or HIPAA's safeguards for protected health information. Failure to address it may result in non-compliance penalties.

Mitigation Strategies

Update to tdx-v0.2.43 or tdx-gpu-v0.6.27 or later versions to address the missing binding between TLS session and quote ReportData.

Hi! I’m here to help you understand CVE-2026-108268. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70