Key points
- CVE-2026-108266 is rated Critical with a CVSS score of 9.1 by the National Vulnerability Database.
- Attackers can relay genuine enclave quotes to impersonate secure servers if they possess the private key.
- The vendor released version 0.8.1 to fix the missing TLS session binding in RA-TLS challenge certificates.
A critical security flaw in the Privasys rustls library allows attackers to impersonate secure enclaves by relaying valid authentication quotes. The National Vulnerability Database assigned CVE-2026-108266 a CVSS score of 9.1, classifying the issue as Critical. Organizations using versions prior to 0.8.1 are exposed to this remote attestation bypass risk.
In plain English
The Privasys rustls library is a modified version of the standard rustls TLS tool that adds support for Remote Attestation. Before version 0.8.1, the library failed to bind the specific TLS session to the security quote included in challenge certificates. This meant the quote was only linked to the public key and a nonce, not the active connection.
The background
According to the NVD record, this weakness maps to CWE-346, which involves an origin validation error. An attacker who obtained an enclave's TLS private key could take a genuine quote from one session and reuse it on another. This relay attack tricked relying parties into accepting the attacker's connection as if it were the legitimate, attested enclave.
What changes now
The vendor has released version 0.8.1 to address this vulnerability. This update ensures that the quote ReportData is properly bound to the active TLS session, preventing the relay of quotes across different connections. Users running any version earlier than privasys-v0.8.1 must upgrade to mitigate the risk of enclave impersonation and attestation bypass.
What to do and how to stay safe: Privasys
- Audit your systems to identify any servers or services running Privasys rustls versions prior to 0.8.1.
- Schedule an immediate upgrade to version 0.8.1 or later to close the vulnerability window.
- Monitor network logs for unusual TLS connection patterns that might indicate quote relay attempts.
- Review your remote attestation policies to ensure they verify session bindings correctly.
Step-by-step guide: Out-of-Band Patches: Meaning, Risks, and Deployment Reality
General security guidance from the Patch Herald newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the severity of CVE-2026-108266?
The National Vulnerability Database rates the vulnerability as Critical with a CVSS score of 9.1.
Which versions of Privasys rustls are affected?
All versions prior to privasys-v0.8.1 are vulnerable to the quote relay attack.
How does an attacker exploit this flaw?
An attacker with the enclave's TLS private key can relay a genuine quote to a new connection, bypassing attestation checks.
