CVE-2026-92792

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

EUVD-2026-81055

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

CVE-2026-92792

OpenNHP through version 1.0.2 is vulnerable to an authentication bypass in its trusted-execution attestation mechanism. The verifier selection logic is driven by attacker-supplied evidence: if the evidence contains a test_purpose key, the FallbackVerifier is selected and executes unconditionally....

CVE-2026-92792 OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...

CVE-2026-92792 OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a testpurpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the testpurpose key in evidence and...