Authentication Bypass in Trustee Project by Confidential Containers

CVE-2025-61779

What is CVE-2025-61779?

The Trustee project, developed by Confidential Containers, includes essential tools for attesting confidential guest environments. In versions prior to 0.15.0, a significant security oversight was identified where the attestation-policy endpoint failed to verify the authentication status of the kbs-client making the request. This vulnerability permitted unauthorized kbs-clients to alter the attestation policy, thereby jeopardizing the security of the confidential guests. The issue was rectified in version 0.15.0, which now mandates proper authentication before permitting policy modifications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References