What’s Vulnerable › Vulnerabilities
CVE-2026-1709: Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 5.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-06 · updated 2026-07-15
- Weakness: CWE-322
Description
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.
Affected products
- keylime: before 7.12.0 — fixed in 7.12.0
- Red Hat Enterprise Linux: 9.0, 10.0
- RedHat Enterprise Linux Eus: 10.0
- RedHat Enterprise Linux For Arm 64: 9.0_aarch64, 10.0_aarch64
- RedHat Enterprise Linux For Arm 64 Eus: 10.0_aarch64
- RedHat Enterprise Linux For Ibm Z Systems: 9.0_s390x, 10.0_s390x
- RedHat Enterprise Linux For Ibm Z Systems Eus: 10.0_s390x
- RedHat Enterprise Linux For Power Little Endian: 9.0_ppc64le, 10.0_ppc64le
- RedHat Enterprise Linux For Power Little Endian Eus: 10.0_ppc64le
How to fix
Upgrade to a fixed version: keylime 7.12.0. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2026:2224
- https://access.redhat.com/errata/RHSA-2026:2225
- https://access.redhat.com/errata/RHSA-2026:2298
- https://access.redhat.com/security/cve/CVE-2026-1709
- https://bugzilla.redhat.com/show_bug.cgi?id=2435514
- https://access.redhat.com/errata/RHSA-2026:2224
- https://access.redhat.com/errata/RHSA-2026:2225
- https://access.redhat.com/errata/RHSA-2026:2298
- https://access.redhat.com/security/cve/CVE-2026-1709
- https://bugzilla.redhat.com/show_bug.cgi?id=2435514
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1709.json
Get alerted when CVE-2026-1709 or the next vulnerability affects your stack