Vulnerability · Published Nov 24, 2025 · Assigned by redhat
CVE-2025-13609Keylime: keylime: registrar allows identity takeover via duplicate uuid registration
High 8.2
In plain English
A high-severity security flaw in keylime from Keylime Project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | keylime | 7.12.1-11.el9_7.3 | ALSA-2025:23210 |
| AlmaLinux:9 | keylime-base | 7.12.1-11.el9_7.3 | ALSA-2025:23210 |
| AlmaLinux:9 | keylime-registrar | 7.12.1-11.el9_7.3 | ALSA-2025:23210 |
| AlmaLinux:10 | keylime-selinux | 7.12.1-11.el10_1.3 | ALSA-2025:23201 |
| AlmaLinux:9 | keylime-selinux | 7.12.1-11.el9_7.3 | ALSA-2025:23210 |
| AlmaLinux:9 | keylime-tenant | 7.12.1-11.el9_7.3 | ALSA-2025:23210 |
| AlmaLinux:9 | keylime-verifier | 7.12.1-11.el9_7.3 | ALSA-2025:23210 |
| AlmaLinux:9 | python3-keylime | 7.12.1-11.el9_7.3 | ALSA-2025:23210 |
| PyPI | keylime | 7.13.0 | GHSA-xh5w-g8gq-r3v9 |
| PyPI | keylime | no fix listed | PYSEC-2025-77 |
| Rocky Linux:10 | keylime | 0:7.12.1-11.el10_1.3 | RLSA-2025:23201 |
| Rocky Linux:9 | keylime | 0:7.12.1-11.el9_7.3 | RLSA-2025:23210 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Keylime Project | keylime | 0 – before 7.14.0 |
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | see references |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | see references |
Weakness: CWE-694 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L
References
- RHSA-2025:23201 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:23210 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:23628 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:23735 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:23852 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:0429 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-13609 vdb-entry, x_refsource_REDHAT
- RHBZ#2416761 issue-tracking, x_refsource_REDHAT
- https://github.com/keylime/keylime/issues/1820