Attestation Relay Attack in CCC Attestation SIG's TLS Product

CVE-2026-112377

What is CVE-2026-112377?

The CCC Attestation SIG's attested-tls-poc is susceptible to an attestation relay attack due to a flaw where early attestation evidence is not properly bound to the TLS connection. This issue allows an attacker with access to the extracted attested TLS private key to manipulate the interaction between the relying party and a legitimate attester. By relaying the party's nonce to the genuine attester, attackers can replay valid evidence, thus impersonating the attested workload, raising serious implications for data confidentiality and system integrity.

References