Information Disclosure Vulnerability in Intel TDX Migration Trust Domain

CVE-2026-57890

What is CVE-2026-57890?

The vulnerability involves improper cleanup of thrown exceptions within the MigTD's SPDM responder, potentially leading to information disclosure. A network adversary, with minimal attack complexity and without authentication, can exploit this flaw to expose sensitive data over the network. This risk does not require user interaction and could be triggered without specific internal knowledge. If exploited, it may significantly compromise the confidentiality of the system while not affecting its integrity and availability.

References