Riskcovery

CVE-2025-13609

Keylime: keylime: registrar allows identity takeover via duplicate uuid registration

State
Published
Severity
8.2 High
Published
Nov 24, 2025
Updated
Jun 29, 2026
Reserved
Nov 24, 2025

Read the record on cve.org

Description

A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls.

Scores

CVSSScoreVectorSource
3.18.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:Lredhat

Weaknesses

  • CWE-694 Use of Multiple Resources with Duplicate Identifier

Affected Products

ProductVersions
keylimeKeylime Project
  • before 7.14.0Affected
Red Hat Enterprise Linux 10Red Hat
  • 0:7.12.1-11.el10_1.3 and laterNot affected
Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat
  • 0:7.12.1-2.el10_0.4 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:7.12.1-11.el9_7.3 and laterNot affected
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat
  • 0:6.5.2-6.el9_2.1 and laterNot affected
Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat
  • 0:7.3.0-13.el9_4.1 and laterNot affected
Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat
  • 0:7.3.0-15.el9_6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.