CVE-2026-119345

Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep th...

EUVD-2026-117556

Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep th...

CVE-2026-119345 Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep th...

CVE-2026-119345

Prior to version 0.9.0 , Cocos AI is vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition within its intra-handshake attested TLS implementation. The system performs attestation only once during the initial connection establishment. An attacker capable of modifying the attester's wor...

CVE-2026-119345 Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep th...