enclave-os-mini: Missing session binding in RA-TLS attestation
Summary
enclave-os-mini is a Rust runtime for confidential applications in Intel SGX enclaves. Before wasm-v0.40.0, the RA-TLS challenge certificate did not bind the attestation quote to the active TLS session. An attacker who has obtained the enclave's TLS private key can relay a genuine quote onto another connection, so a relying party may accept an attacker-terminated connection as the attested enclave. The attack requires that private key, which is the main barrier.
Affected
- enclave-os-mini versions before wasm-v0.40.0 (CVE record: affected < wasm-v0.40.0)
- Note: the GitHub advisory states <= wasm-v0.39.0; the exact range should be verified against the advisory.
- Related: Privasys rustls fork before privasys-v0.8.1 has a similar flaw class (separate advisory).
Fixed in
- enclave-os-mini wasm-v0.40.0 and later
Workaround
- None documented. The vendor advisory offers no workaround and no opt-out; upgrading is the only remedy.
Exploitation
- No known exploitation in the wild. CISA SSVC: exploitation none, automatable no, technical impact total.
- No public proof-of-concept found in searches.
- EPSS 0.00117 (Rapid7).
Our recommendation
- Check whether any system uses enclave-os-mini, the Privasys rustls fork or the Privasys Go fork.
- Upgrade enclave-os-mini to wasm-v0.40.0 or later, and the Privasys rustls fork to privasys-v0.8.1 or later.
- Verify the fix against the release notes and commit.
- Assess priority: low for typical SMEs, high if you develop on or deploy this runtime.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Fix commit github.com
- Release wasm-v0.40.0 github.com
- GitHub Security Advisory GHSA-49qm-4pj3-w2c6 github.com
- Privasys blog: Binding attestation to the TLS session privasys.org
- OSV entry CVE-2026-108265 osv.dev
- Privasys rustls advisory GHSA-j6qv-435v-r492 github.com
- Privasys rustls release privasys-v0.8.1 github.com
- VulDB CVE-2026-108265 vuldb.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 07:05.
Original description (NVD)
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in wasm-v0.40.0.
NVD references (4)
- https://github.com/Privasys/enclave-os-mini/commit/9f541c849ef733d2df2851a666f359d01dcdcb8e
- https://github.com/Privasys/enclave-os-mini/releases/tag/wasm-v0.40.0
- https://github.com/Privasys/enclave-os-mini/security/advisories/GHSA-49qm-4pj3-w2c6
- https://privasys.org/blog/binding-attestation-to-the-tls-session
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.