CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence...