CVE-2026-1709

moderate-risk

Published 2026-02-06

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.4/10 Critical

NETWORK / LOW complexity

Affected Products (13)

Keylime

Enterprise Linux

Enterprise Linux Eus

Enterprise Linux For Arm 64

Enterprise Linux For Arm 64 Eus

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Power Little Endian

Enterprise Linux For Power Little Endian Eus

Affected Vendors

Redhat Keylime

References (5)

Third Party Advisory https://access.redhat.com/errata/RHSA-2026:2224

Third Party Advisory https://access.redhat.com/errata/RHSA-2026:2225

Third Party Advisory https://access.redhat.com/errata/RHSA-2026:2298

Third Party Advisory https://access.redhat.com/security/cve/CVE-2026-1709

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2435514

/ 100

moderate-risk

Severity 31/34 · Critical

Exploitability 0/34 · Minimal

Exposure 17/34 · Moderate