Intel TDX MigTD: spoofing in the rebinding protocol lets privileged host software bypass authentication

CVSS 9.3CVE-2026-44685Firmware, BMC & network fabriccurated

Impact

The MigTD rebinding protocol can be spoofed, which lets privileged system software bypass authentication and run code locally. TDX treats the host VMM as untrusted, so a host-level adversary who gets past MigTD weakens the protection TDX gives tenant confidential VMs during migration. Intel rates confidentiality, integrity and availability impact as high on MigTD and on the systems that depend on it. Only hosts that use MigTD for TD live migration are affected.

Who can reach it

Local privileged system software on the TDX host, such as a compromised or malicious VMM or host root. Low complexity, no user interaction. This is the adversary TDX is meant to defend tenants against.

What to do

Apply the MigTD update named in Intel advisory INTEL-SA-01580. The record does not give a fixed version. Rollout cost depends on how your VMM stack deploys the MigTD image. Check with your platform or hypervisor vendor.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-44685 https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.