Hoch 7.2Software
CVE-2026-119345
Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
github.com/ultravioletrs/cocos
### Summary An attacker who can modify the attested workload’s code, memory-backed state, or configuration after the initial attestation — but without necessarily terminating the existing TLS connection — can cause the peer to continue trusting the connection as if the originally attested state were still running. ### Details Once attestation is successfully appraised and connection is established, there is a window of vulnerability from the establishment of connection to…
5. Nov 2026
Original bei NVD öffnen