Privasys ra-tls-clients: Quote not bound to TLS session in challenge verification
Summary
The Rust and Go RA-TLS challenge verifiers of Privasys ra-tls-clients accepted attestation quotes that were bound to the certificate key and nonce but not to the active TLS session. An attacker who holds an enclave's TLS private key and a network position can relay a genuine quote onto another connection, so the client accepts an attacker-terminated connection as the attested enclave. Exploitation requires the stolen key and is considered difficult.
Affected
- Privasys ra-tls-clients (Rust and Go) before 0.5.0
Fixed in
- Version 0.5.0 (fix dated 10 July 2026 by the vendor)
- Later releases also contain fixes for separate advisories; use the latest release
Workaround
Unknown.
Exploitation
- No evidence of exploitation in the wild found in the sources checked; CISA KEV not verified
- No public proof of concept found
- EPSS 0.13%
- CISA SSVC: exploitation none, not automatable
Our recommendation
- Ask developers or vendors whether ra-tls-clients is used in your services or SDKs
- If it is used, check the version and dependency manifests and update to the latest release, not only 0.5.0
- Monitor the vendor advisories for further issues
- Low priority for most SMEs that do not operate Privasys-based confidential-computing services
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-5qrc-v874-mxvx github.com
- Fix commit b8de9bc github.com
- Release v0.5.0 github.com
- Privasys blog: Binding attestation to the TLS session privasys.org
- OSV entry CVE-2026-108269 osv.dev
- Related advisory GHSA-pj2x-5wqv-fh57 github.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 07:04.
Original description (NVD)
Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application traffic. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing the clients to accept an attacker-terminated connection as the attested enclave. This issue is fixed in 0.5.0.
NVD references (7)
- https://github.com/Privasys/ra-tls-clients/commit/b8de9bcadd0f81ca8882d15095fc0d9c50e40148
- https://github.com/Privasys/ra-tls-clients/releases/tag/v0.5.0
- https://github.com/Privasys/ra-tls-clients/security/advisories/GHSA-5qrc-v874-mxvx
- https://github.com/Privasys/ra-tls-clients/security/advisories/GHSA-5qrc-v874-mxvx
- https://github.com/Privasys/ra-tls-clients/security/advisories/GHSA-5qrc-v874-mxvx
- https://github.com/Privasys/ra-tls-clients/security/advisories/GHSA-5qrc-v874-mxvx
- https://privasys.org/blog/binding-attestation-to-the-tls-session
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.