Intel MigTD CVE-2026-57890

Exploitation targets the SPDM responder inside MigTD (the Intel TDX Migration Trust Domain), which operates during live migration/attestation of a Trust Domain; the adversary must be able to reach this responder over the network. Per the CVSS vector (AV:N/AC:L/AT:N/PR:N/UI:N) no authentication, no special attack requirements, no user interaction, and no non-default configuration are stated as necessary. The practical limiting factor is exposure window and surface: the SPDM responder is only an active target where Intel TDX with MigTD is deployed and a Trust Domain migration session is in progress or reachable, confining real-world opportunity to confidential-computing environments rather than general-purpose hosts. The precise message or state that triggers the thrown exception is not described in the available sources.

Signals are largely consistent and point to a genuinely serious but not emergency-grade issue. The Intel-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H) describes a network-reachable, low-complexity, unauthenticated flaw with no user interaction and high confidentiality impact, scoring 8.7 (High) - a plausibly real-world-exploitable condition on paper. However, the counterbalancing signals temper urgency: there is no CISA KEV listing (not actively exploited), no EPSS score supplied (widespread-exploitation probability unknown), and no public exploit or PoC reference, so no public exploit is identified at time of analysis. The vuln.today decision label is 'this_week', not act_now/emergency, which aligns with a high-severity-but-not-under-attack posture. A key contextual limiter missing from the raw CVSS is deployment surface: MigTD's SPDM responder is only a live, network-reachable target during Trust Domain migration, so the AV:N/PR:N exposure is narrower in practice than the vector alone implies - verify reachability assumptions against the Intel advisory (INTEL-SA-01580), whose full content was not retrieved here. Net: a real patch priority for TDX/confidential-computing operators, but presently a high-CVSS issue without confirmed in-the-wild exploitation rather than an actively exploited crisis.

During a Trust Domain live migration, a network-positioned adversary interacts with MigTD's SPDM responder and sends a message that forces an exception; because of improper cleanup on that thrown exception (CWE-460), residual confidential memory is exposed back to the attacker. No authentication or user interaction is required per the CVSS vector, and the low attack complexity makes the flaw practical to trigger, though no public exploit code is identified at time of analysis.