VYPR

Cocos AI

by Ultraviolet

Source repositories

CVEs (3)

  • CVE-2026-92702CriSep 18, 2026
    risk 0.52cvss 9.1epss 0.00

    Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS (aTLS) AMD SEV-SNP verification path does not enforce attestation freshness when the expected…

  • CVE-2026-92701CriSep 18, 2026
    risk 0.52cvss 9.1epss 0.00

    Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS (aTLS) Intel TDX verification path does not copy the expected current-session freshness value into…

  • CVE-2026-33697HigMar 27, 2026
    risk 0.42cvss 7.5epss 0.00

    Cocos AI is a confidential computing system for AI. The current implementation of attested TLS (aTLS) in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment…