EXPOSURES › CVE-2026-1709
CVE-2026-1709
CRITICAL
DETAIL
SourceNVD · cve
Published2026-02-06
CVSS9.4
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-1709 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
keylime · vendorredhat · vendorenterprise linux · productenterprise linux eus · productenterprise linux for arm 64 · productenterprise linux for arm 64 eus · productenterprise linux for ibm z systems · productenterprise linux for ibm z systems eus · productenterprise linux for power little endian · productenterprise linux for power little endian eus · productkeylime · product
DESCRIPTION
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.