You can include the transaction ID in the clientDataHash calculation, which will be signed by the authenticator. This protects against that attack.

https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-cl...