Skip to content
OpenAdvisories

Package · PyPI

keylime

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-1709

    Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication

    A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform admini…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 10.0 Extended Update Support Linux PyPI
  • Critical 9.1
    CVE-2022-1053

    Tenant and Verifier might not use the same registrar data

    Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows an attacker to use one AK, EK pair from a real TPM to pass …

    keylime PyPI