PT-2026-6781 · Keylime+1 · Keylime+1

Bzimport · Published 2026-02-06 · Updated 2026-03-19 · CVE-2026-1709

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Keylime versions 7.12.0 and later

Description A flaw exists in Keylime where the registrar does not enforce client-side Transport Layer Security (TLS) authentication. This allows unauthenticated clients with network access to perform administrative operations. These operations include listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents by connecting without presenting a client certificate.

Recommendations Versions 7.12.0 and later require client-side TLS authentication to be enforced to prevent unauthorized administrative operations.

Fix

Improper Certificate Validation

Missing Authentication

Weakness Enumeration

CWE-295

CWE-306

CWE-322

Related Identifiers

ALSA-2026:2224

ALSA-2026:2225

CVE-2026-1709

GHSA-27JC-JMP8-QFW5

GHSA-4JQP-9QJV-57M2

OPENSUSE-SU-2026:10165-1

OPENSUSE-SU-2026:20398-1

PYSEC-2026-74

RHSA-2026:2224

RHSA-2026:2225

RHSA-2026:2298

SUSE-SU-2026:20912-1

Affected Products

Keylime

Rocky Linux

References · 40

• https://access.redhat.com/errata/RHSA-2026:2224 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:2298 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:2224 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10165-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1709 · Security Note
• https://osv.dev/vulnerability/ALSA-2026:2225 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20912-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-2224.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-1709 · Security Note
• https://osv.dev/vulnerability/GHSA-4jqp-9qjv-57m2 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:2225 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:2224 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-2225.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20398-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-27jc-jmp8-qfw5 · Vendor Advisory