GHSA-27jc-jmp8-qfw5
Critical · 9.4CVSS
9.4
EPSS
—
Published
Feb 6, 2026
CISA due date
—
The record
Duplicate Advisory: Keylime Missing Authentication for Critical Function and Improper Authentication
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | keylime | 7.12.0 | 7.12.2 |
| PyPI | keylime | 7.13.0 | 7.13.1 |
Related vulnerabilities
- GHSA-4jqp-9qjv-57m2 Keylime Missing Authentication for Critical Function and Improper Authentication Also affects keylime
- CVE-2026-1709 A flaw was found in Keylime. Also affects keylime
- GHSA-xh5w-g8gq-r3v9 Keylime allows users to register new agents by recycling existing UUIDs when using… Also affects keylime
- CVE-2025-13609 A vulnerability has been identified in keylime where an attacker can exploit this flaw by… Also affects keylime
- CVE-2026-94423 Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because… CWE-322
- CVE-2026-94140 Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync… CWE-322
- CVE-2026-107675 FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the… CWE-322
- CVE-2026-18654 Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS… CWE-322