Auth bypass in Caliptra Core Runtime Firmware
CVE-2026-7328
Missing authorization in Caliptra Core Runtime Firmware (INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, EXTERNAL_MAILBOX_CMD commands) in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands cont…
Vulnerability class: Broken Access Control
Affected products
- Caliptra Core Runtime Firmware — versions 2.1.0, 2.1.1