Skip to content
OpenAdvisories

Vendor

ultravioletrs

5 known vulnerabilities.

Products

cocos 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-119345

    Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

    Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attache…

    ultravioletrs cocos github.com/ultravioletrs/cocos Go
  • High 7.5
    CVE-2026-33697 Public exploit

    CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

    Cocos AI is a confidential computing system for AI. The current implementation of attested TLS (aTLS) in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel T…

    ultravioletrs cocos