diff --git a/src/transport/SecureSession.cpp b/src/transport/SecureSession.cpp
index d9e27361cbc6ce..3a9be04d8912e6 100644
--- a/src/transport/SecureSession.cpp
+++ b/src/transport/SecureSession.cpp
@@ -27,8 +27,8 @@ Access::SubjectDescriptor SecureSession::GetSubjectDescriptor() const
     {
         subjectDescriptor.authMode    = Access::AuthMode::kCase;
         subjectDescriptor.subject     = mPeerNodeId;
+        subjectDescriptor.cats        = mPeerCATs;
         subjectDescriptor.fabricIndex = mFabric;
-        // TODO(#10243): add CATs
     }
     else if (IsPAKEKeyId(mPeerNodeId))
     {