CVE Feed

    Dashboard / CVE / CVE-2026-1709

    CVE-2026-1709

    A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.

    Published:Feb 6, 2026
    Last Modified:Apr 16, 2026
    EPS:Feb 6, 2026
    EPSS Score:0.0003
    CVSS Score:9.4

    Affected Products

    Vendor
    Keylime
    Product
    Keylime
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Arm 64
    Vendor
    Redhat
    Product
    Enterprise Linux For Arm 64 Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian Eus

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-38201 (CVSS 6.5) — A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during …
    CVE-2023-38200 (CVSS 7.5) — A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial…
    CVE-2023-3674 (CVSS 2.3) — A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as fa…
    CVE-2022-3500 (CVSS 5.1) — A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperl…
    CVE-2022-23952 (CVSS 7.5) — In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive…
    CVE-2022-23951 (CVSS 5.5) — In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead…
    CVE-2022-23950 (CVSS 7.5) — In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unp…
    CVE-2022-23949 (CVSS 7.5) — In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the …
    CVE-2021-43310 (CVSS 9.8) — A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U a…
    CVE-2022-23948 (CVSS 7.5) — A flaw was found in Keylime before 6.3.0. The logic in the Keylime agent for checking for a secure mount can b…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High