CVE-2026-1709 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-1709 Interim 1 1 2026-03-05T00:19:28Z current 2026-03-05T00:19:28Z 2026-03-05T00:19:28Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-1709 A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 openSUSE Tumbleweed keylime keylime-agent keylime-config keylime-config-7.14.0+0-1.1 keylime-firewalld keylime-firewalld-7.14.0+0-1.1 keylime-logrotate keylime-logrotate-7.14.0+0-1.1 keylime-registrar keylime-registrar-7.14.0+0-1.1 keylime-tenant keylime-tenant-7.14.0+0-1.1 keylime-tpm_cert_store keylime-tpm_cert_store-7.14.0+0-1.1 keylime-verifier keylime-verifier-7.14.0+0-1.1 python3-keylime python311-keylime-7.14.0+0-1.1 python312-keylime-7.14.0+0-1.1 python313-keylime python313-keylime-7.14.0+0-1.1 keylime-config-7.14.0+0-1.1 as a component of openSUSE Tumbleweed keylime-firewalld-7.14.0+0-1.1 as a component of openSUSE Tumbleweed keylime-logrotate-7.14.0+0-1.1 as a component of openSUSE Tumbleweed keylime-registrar-7.14.0+0-1.1 as a component of openSUSE Tumbleweed keylime-tenant-7.14.0+0-1.1 as a component of openSUSE Tumbleweed keylime-tpm_cert_store-7.14.0+0-1.1 as a component of openSUSE Tumbleweed keylime-verifier-7.14.0+0-1.1 as a component of openSUSE Tumbleweed python311-keylime-7.14.0+0-1.1 as a component of openSUSE Tumbleweed python312-keylime-7.14.0+0-1.1 as a component of openSUSE Tumbleweed python313-keylime-7.14.0+0-1.1 as a component of openSUSE Tumbleweed keylime-agent as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-firewalld as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-logrotate as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-registrar as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-tpm_cert_store as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-verifier as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python3-keylime as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-agent as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-firewalld as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-logrotate as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-registrar as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-tpm_cert_store as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-verifier as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python3-keylime as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-agent as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-config as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-firewalld as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-logrotate as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-registrar as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-verifier as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 python3-keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-agent as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-config as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-firewalld as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-logrotate as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-registrar as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-tpm_cert_store as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-verifier as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python3-keylime as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-agent as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-config as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-firewalld as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-logrotate as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-registrar as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-tpm_cert_store as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-verifier as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python3-keylime as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-agent as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-config as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-firewalld as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-logrotate as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-registrar as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-tpm_cert_store as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-verifier as a component of SUSE Linux Enterprise Server 15 SP6-LTSS python3-keylime as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-config as a component of SUSE Linux Enterprise Server 16.0 keylime-firewalld as a component of SUSE Linux Enterprise Server 16.0 keylime-logrotate as a component of SUSE Linux Enterprise Server 16.0 keylime-registrar as a component of SUSE Linux Enterprise Server 16.0 keylime-tenant as a component of SUSE Linux Enterprise Server 16.0 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Server 16.0 keylime-verifier as a component of SUSE Linux Enterprise Server 16.0 python313-keylime as a component of SUSE Linux Enterprise Server 16.0 keylime as a component of SUSE Linux Enterprise Server 16.0 keylime as a component of SUSE Linux Enterprise Server Teradata 15 SP4 keylime-agent as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-firewalld as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-logrotate as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-registrar as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-verifier as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python3-keylime as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-agent as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-firewalld as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-logrotate as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-registrar as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-verifier as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python3-keylime as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-agent as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-firewalld as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-logrotate as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-registrar as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-verifier as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 python3-keylime as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-config as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-firewalld as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-logrotate as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-registrar as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-tenant as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-verifier as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python313-keylime as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-agent as a component of openSUSE Leap 15.6 keylime-config as a component of openSUSE Leap 15.6 keylime-firewalld as a component of openSUSE Leap 15.6 keylime-logrotate as a component of openSUSE Leap 15.6 keylime-registrar as a component of openSUSE Leap 15.6 keylime-tpm_cert_store as a component of openSUSE Leap 15.6 keylime-verifier as a component of openSUSE Leap 15.6 python3-keylime as a component of openSUSE Leap 15.6 keylime as a component of openSUSE Leap 15.6 A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate. CVE-2026-1709 openSUSE Tumbleweed:keylime-config-7.14.0+0-1.1 openSUSE Tumbleweed:keylime-firewalld-7.14.0+0-1.1 openSUSE Tumbleweed:keylime-logrotate-7.14.0+0-1.1 openSUSE Tumbleweed:keylime-registrar-7.14.0+0-1.1 openSUSE Tumbleweed:keylime-tenant-7.14.0+0-1.1 openSUSE Tumbleweed:keylime-tpm_cert_store-7.14.0+0-1.1 openSUSE Tumbleweed:keylime-verifier-7.14.0+0-1.1 openSUSE Tumbleweed:python311-keylime-7.14.0+0-1.1 openSUSE Tumbleweed:python312-keylime-7.14.0+0-1.1 openSUSE Tumbleweed:python313-keylime-7.14.0+0-1.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-agent SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-config SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-firewalld SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-logrotate SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-registrar SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-tpm_cert_store SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-verifier SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-keylime SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-agent SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-config SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-firewalld SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-logrotate SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-registrar SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-tpm_cert_store SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-verifier SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python3-keylime SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-agent SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-config SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-firewalld SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-logrotate SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-registrar SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-tpm_cert_store SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-verifier SUSE Linux Enterprise Module for Basesystem 15 SP7:python3-keylime SUSE Linux Enterprise Server 15 SP4-LTSS:keylime SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-agent SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-config SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-firewalld SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-logrotate SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-registrar SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-tpm_cert_store SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-verifier SUSE Linux Enterprise Server 15 SP4-LTSS:python3-keylime SUSE Linux Enterprise Server 15 SP5-LTSS:keylime SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-agent SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-config SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-firewalld SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-logrotate SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-registrar SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-tpm_cert_store SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-verifier SUSE Linux Enterprise Server 15 SP5-LTSS:python3-keylime SUSE Linux Enterprise Server 15 SP6-LTSS:keylime SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-agent SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-config SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-firewalld SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-logrotate SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-registrar SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-tpm_cert_store SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-verifier SUSE Linux Enterprise Server 15 SP6-LTSS:python3-keylime SUSE Linux Enterprise Server Teradata 15 SP4:keylime SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-agent SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-config SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-firewalld SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-logrotate SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-registrar SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-tpm_cert_store SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-verifier SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-keylime SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-agent SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-config SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-firewalld SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-logrotate SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-registrar SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-tpm_cert_store SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-verifier SUSE Linux Enterprise Server for SAP Applications 15 SP5:python3-keylime SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-agent SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-config SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-firewalld SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-logrotate SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-registrar SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-tpm_cert_store SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-verifier SUSE Linux Enterprise Server for SAP Applications 15 SP6:python3-keylime openSUSE Leap 15.6:keylime openSUSE Leap 15.6:keylime-agent openSUSE Leap 15.6:keylime-config openSUSE Leap 15.6:keylime-firewalld openSUSE Leap 15.6:keylime-logrotate openSUSE Leap 15.6:keylime-registrar openSUSE Leap 15.6:keylime-tpm_cert_store openSUSE Leap 15.6:keylime-verifier openSUSE Leap 15.6:python3-keylime critical 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H