{"action":"Upgrade keylime to 7.12.0 or later.","affected":[{"fixed":"7.12.0","introduced":"0"}],"component":"keylime","cve_ids":["CVE-2026-1709"],"ecosystem":"PyPI","epss":0.05794,"exploited":false,"fixed_versions":["7.12.0"],"ghsa_id":"GHSA-4jqp-9qjv-57m2","id":"tcs_01M5KHD81RT22XFCX9J5C0NW26","modified_at":"2026-06-10T17:01:56.825950085Z","published_at":"2026-02-06T20:16:09.193Z","references":["https://osv.dev/vulnerability/PYSEC-2026-74","https://access.redhat.com/errata/RHSA-2026:2224","https://access.redhat.com/errata/RHSA-2026:2225","https://access.redhat.com/errata/RHSA-2026:2298","https://access.redhat.com/security/cve/CVE-2026-1709","https://bugzilla.redhat.com/show_bug.cgi?id=2435514","https://github.com/advisories/GHSA-4jqp-9qjv-57m2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-74","url":"https://osv.dev/vulnerability/PYSEC-2026-74"}],"summary":"A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows un"}