CVE-2026-1709

Keylime Registrar starting from version 7.12.0 stopped enforcing client-side authentication in Transport Layer Security (TLS) protocol. In proper configuration, the client should present a client certificate when establishing a connection, which confirms its identity. Due to this vulnerability (CWE-322: Key Exchange without Entity Authentication), any client with network access can establish a connection without a certificate and perform operations reserved for authenticated entities.

An unauthenticated attacker with network access can enumerate agents, read public Trusted Platform Module (TPM) data, and delete agents, threatening the integrity and availability of the trust verification infrastructure.

Apply patches available from the vendor according to Red Hat advisories: RHSA-2026:2224, RHSA-2026:2225, and RHSA-2026:2298. Additionally, until updates are applied, it is recommended to restrict network access to Keylime Registrar only to trusted hosts using firewall or network segmentation.

Keylime version 7.12.0 and later; Red Hat Enterprise Linux, Red Hat Enterprise Linux EUS, and Red Hat Enterprise Linux for ARM 64 (versions indicated in vendor references)