https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:17:11.041996+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-61779 CVE-2025-61779 — Trustee's attestation-policy endpoint is not protected by admin autentication 2026-10-17T15:17:11.043139+00:00

Affected: confidential-containers trustee

Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated (had the right key). This allowed any kbs-client to actually change the attestation policy. Version 0.15.0 fixes the issue.