Cocos AI attestation accepts evidence from the wrong platform
Other devices can pass as trusted in this AI secure computing system!
Summary
Cocos AI accepts trusted execution environment attestation evidence without binding it to an allowed platform owner or machine identity, and without enforcing revocation. If an attacker controls or compromises another platform trusted by the same verifier, they can substitute valid evidence and get the wrong platform authorized.
Affected when
- Attacker controls or compromises another platform trusted by the same verifier
What to do
Update to 0.9.0. The advisory states this cannot be fixed by source code changes alone.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen