Cocos AI checks attestation only once, trusting stale state on open TLS connections
Changed devices in confidential AI systems can keep being trusted during a connection.
Summary
Cocos AI performs attestation only once when a TLS connection is established. An attacker who changes the attester's code, state, configuration or devices afterward can keep the connection open while the peer keeps trusting the old evidence. Versions before 0.9.0 are affected.
Affected when
- Cocos AI before 0.9.0
What to do
Update Cocos AI to 0.9.0 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen