Privasys vulnerabilities
We track 7 vulnerabilities in Privasys products across 5 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
Latest Privasys vulnerabilities
- 9.1 Critical severity
ra-tls-clients: Origin Validation Error
Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When
- 7.2 High severity
ra-tls-clients: Time-of-check Time-of-use (TOCTOU) Race Condition
Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successful connection establishm
- 9.1 Critical severity
ra-tls-clients: Origin Validation Error
Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not
- 9.1 Critical severity
enclave-os-virtual: Origin Validation Error
Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote Repor
- 9.1 Critical severity
go: Origin Validation Error
Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the a
- 9.1 Critical severity
rustls: Origin Validation Error
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and c
- 9.1 Critical severity
enclave-os-mini: Origin Validation Error
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted