Threat Intelligence Database

A security update for Keylime addresses CVE-2026-6420, which involves the use of a hardcoded challenge nonce in TPM quote attestation. This vulnerability allows a security bypass in the attestation process. The update to Keylime version 7.14.2 fixes this issue. The vulnerability is rated as medium severity and affects certain versions of Keylime distributed with Red Hat Enterprise Linux 10 and related platforms.

A critical authentication bypass vulnerability (CVE-2026-1709) exists in Keylime, a TPM-based remote boot attestation and runtime integrity measurement solution. The issue arises from missing client-side TLS authentication, allowing unauthorized administrative operations. This vulnerability affects Keylime packages distributed with Red Hat Enterprise Linux 10 across multiple architectures. Red Hat has issued a security update to address this flaw.

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.

A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls.

A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls.