Authentication Bypass Vulnerability in Intel TDX Migration Trust Domain
CVE-2026-61473

9.2CRITICAL

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 November 2026

What is CVE-2026-61473?

An authentication bypass vulnerability exists in the Intel TDX Migration Trust Domain (MigTD) that could be exploited by a system software adversary. This vulnerability allows for potential privilege escalation through a capture-replay attack. The attack requires local access and can be executed with low complexity, leveraging a privileged user without the need for special internal knowledge or user interaction. If successfully exploited, this vulnerability may compromise system confidentiality and integrity, leading to significant security risks.

Affected Version(s)

Intel(R) TDX Migration Trust Domain (MigTD) See references

References

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.