Enclave OS Virtual previously omitted a value bound to the active TLS session in the RA‑TLS certificate issuer’s quote ReportData, allowing an attacker who possessed the enclave TLS private key to relay a genuine quote onto a different connection. This flaw lets a relying party accept a maliciously terminated connection as if it were from the authenticated enclave, effectively spoofing attestation and bypassing security checks on the connection. The weakness is a classic instance of Untrusted Data (CWE‑346).

Privasys Enclave OS Virtual is affected. Versions prior to tdx-v0.2.43 and tdx-gpu-v0.6.27 lack the mitigation that binds the TLS session to the attestation data; these versions should be considered vulnerable. Newer releases that include these fixes do not exhibit this flaw.

The CVSS score of 9.1 signals a high severity vulnerability, while the EPSS score is not available, so the precise likelihood of exploitation is uncertain. However, the flaw is listed in no KEV catalog, indicating no known publicly exploited incidents yet. Exploitation would occur over a network connection and requires the attacker to obtain or compromise the enclave TLS private key, after which the forged attestation can be used to bypass authentication checks on any relying party trusting the RA‑TLS chain.