GHSA-xh5w-g8gq-r3v9
High · 8.2CVSS
8.2
EPSS
—
Published
Nov 24, 2025
CISA due date
—
The record
Keylime allows users to register new agents by recycling existing UUIDs when using different TPM devices
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | keylime | 0 | 7.13.0 |
Related vulnerabilities
- CVE-2025-13609 A vulnerability has been identified in keylime where an attacker can exploit this flaw by… Same vulnerability
- GHSA-4jqp-9qjv-57m2 Keylime Missing Authentication for Critical Function and Improper Authentication Also affects keylime
- GHSA-27jc-jmp8-qfw5 Duplicate Advisory: Keylime Missing Authentication for Critical Function and Improper… Also affects keylime
- CVE-2026-1709 A flaw was found in Keylime. Also affects keylime
- CVE-2026-5794 A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to… CWE-694
- CVE-2025-59048 OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method CWE-694