{"action":"Upgrade keylime to 7.12.2 or later.","affected":[{"fixed":"7.12.2","introduced":"7.12.0"},{"fixed":"7.13.1","introduced":"7.13.0"}],"component":"keylime","cve_ids":["CVE-2026-1709"],"ecosystem":"PyPI","epss":0.0571,"exploited":false,"fixed_versions":["7.12.2","7.13.1"],"ghsa_id":"GHSA-4jqp-9qjv-57m2","id":"tcs_01M5KEYFHGMZZHVK90Y4A11BGC","modified_at":"2026-06-06T00:45:49.404160714Z","published_at":"2026-02-06T22:34:44Z","references":["https://osv.dev/vulnerability/GHSA-4jqp-9qjv-57m2","https://github.com/keylime/keylime/security/advisories/GHSA-4jqp-9qjv-57m2","https://nvd.nist.gov/vuln/detail/CVE-2026-1709","https://access.redhat.com/errata/RHSA-2026:2224","https://access.redhat.com/errata/RHSA-2026:2225","https://access.redhat.com/errata/RHSA-2026:2298","https://access.redhat.com/security/cve/CVE-2026-1709","https://bugzilla.redhat.com/show_bug.cgi?id=2435514","https://github.com/keylime/keylime","https://github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2026-74.yaml"],"severity":{"label":"critical","score":9.4},"sources":[{"source":"osv","source_id":"GHSA-4jqp-9qjv-57m2","url":"https://osv.dev/vulnerability/GHSA-4jqp-9qjv-57m2"}],"summary":"Keylime Missing Authentication for Critical Function and Improper Authentication"}