BaseFortify

Publication date: 2025-11-24

Last updated on: 2026-06-29

Assigner: Red Hat, Inc.

Description

A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-24

Last Modified

2026-06-29

Generated

2026-07-06

AI Q&A

2025-11-24

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13609

Affected Vendors & Products

Vendor	Product	Version / Range
keylime	keylime	3.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-694	The product uses multiple resources that can have the same identifier, in a context in which unique identifiers are required.

Attack-Flow Graph

Executive Summary

This vulnerability in keylime allows an attacker to register a new agent using a different Trusted Platform Module (TPM) device but claim the unique identifier (UUID) of an existing agent. This overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls.

Impact Analysis

The vulnerability can lead to an attacker impersonating a legitimate agent by overwriting its identity. This can result in bypassing security controls, potentially allowing unauthorized access, data manipulation, or disruption of services relying on agent authentication.

Hi! I’m here to help you understand CVE-2025-13609. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70