Cocos AI attested TLS vulnerable to TOCTOU attacks after handshake
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Cocos AI from ultravioletrs, before 0.9.0, performs attestation only once when an attested TLS connection is established. A local attacker with low privileges who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep the existing connection open while the peer continues trusting stale initial Evidence (CWE-367). The verifier has no way to detect the changed state, which is especially significant for long-lived connections.
Written with Claude Haiku 5.5 from the sources below · 2026-11-05
Description from the CNA
Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep the existing connection open while the peer continues trusting stale initial Evidence. This gap is especially significant for long-lived connections because the verifier has no mechanism to detect the changed state. This issue is fixed in version 0.9.0.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ultravioletrs | cocos | before 0.9.0 | 0.9.0 | Patch available | CNA |
- cocos Vendorultravioletrs Affected before 0.9.0 Fixed in 0.9.0 Patch available CNA
Remediation
Upgrade Cocos AI from ultravioletrs to version 0.9.0, which fixes the issue.
Written with Claude Haiku 5.5 from the sources below · 2026-11-05
- Fix · CNA cocos (ultravioletrs) Fixed in 0.9.0
Timeline
- 2026-11-05 Threatist record created from CVE-2026-119345
- 2026-11-05 CISA SSVC decision points changed
- 2026-11-05 Priority changed: MEDIUM → LOW
References
More ultravioletrs vulnerabilities
- TI-2026-62478 Origin validation error in ultravioletrs cocos CVSS 3.1CRITICAL 9.1
- TI-2026-62477 Origin validation error in ultravioletrs cocos CVSS 3.1CRITICAL 9.1
- TI-2026-85492 Origin validation error in Cocos AI attestation CVSS 4.0CRITICAL 9.1
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences