{"action":"Upgrade keylime to 7.13.0 or later.","affected":[{"fixed":"7.13.0","introduced":"0"}],"component":"keylime","cve_ids":["CVE-2025-13609"],"ecosystem":"PyPI","epss":0.00469,"exploited":false,"fixed_versions":["7.13.0"],"ghsa_id":"GHSA-xh5w-g8gq-r3v9","id":"tcs_01M5KG481TV33TQEWAQ8V3P9ND","modified_at":"2026-05-29T21:00:16.321285534Z","published_at":"2025-11-24T18:31:14Z","references":["https://osv.dev/vulnerability/GHSA-xh5w-g8gq-r3v9","https://nvd.nist.gov/vuln/detail/CVE-2025-13609","https://github.com/keylime/keylime/issues/1820","https://github.com/keylime/keylime/pull/1785","https://github.com/keylime/keylime/commit/e1ae8de1f7b1385eaeec66572a92ff1338e6e157","https://access.redhat.com/errata/RHSA-2025:23201","https://access.redhat.com/errata/RHSA-2025:23210","https://access.redhat.com/errata/RHSA-2025:23628","https://access.redhat.com/errata/RHSA-2025:23735","https://access.redhat.com/errata/RHSA-2025:23852","https://access.redhat.com/errata/RHSA-2026:0429","https://access.redhat.com/security/cve/CVE-2025-13609","https://bugzilla.redhat.com/show_bug.cgi?id=2416761","https://github.com/keylime/keylime","https://github.com/keylime/keylime/releases/tag/v7.13.0","https://github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2025-77.yaml"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-xh5w-g8gq-r3v9","url":"https://osv.dev/vulnerability/GHSA-xh5w-g8gq-r3v9"}],"summary":"Keylime allows users to register new agents by recycling existing UUIDs when using different TPM devices"}