CyberSecBulletin

Confidential-containers vulnerabilities

We track 2 vulnerabilities in Confidential-containers products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2025.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Confidential-containers vulnerabilities

  • 8.7 High severity

    trustee: Authorization Bypass Through User-Controlled Key

    CVE-2025-61779Confidential-containers

    Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actu

  • 8.1 High severity

    trustee: Improper Authentication

    CVE-2024-51997Confidential-containers

    Trustee is a set of tools and components for attesting confidential guests and providing secrets to them. The ART (**Attestation Results Token**) token, generated by AS, could be manipulated by MITM attacker, but the verifier (CoCo Verification Demander like K