trustee vulnerabilities

2 known vulnerabilities in trustee from Confidential-containers. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  trustee: Authorization Bypass Through User-Controlled Key

  CVE-2025-61779Oct 9, 2025Confidential-containers

  Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actu

• 8.1 High severity

  trustee: Improper Authentication

  CVE-2024-51997Nov 8, 2024Confidential-containers

  Trustee is a set of tools and components for attesting confidential guests and providing secrets to them. The ART (**Attestation Results Token**) token, generated by AS, could be manipulated by MITM attacker, but the verifier (CoCo Verification Demander like K