Back Linuxsecurity

Fix for Critical Auth Bypass in Fedora 42 Keylime-Agent

Linuxsecurity •LinuxSecurity Advisories • March 4, 2026

The Keylime agent Update Information : Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609

Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609

* Fri Feb 13 2026 Anderson Toshiyuki Sasaki - 0.2.9-1 - Update to upstream version 0.2.9

[ 1 ] Bug #2435514 - CVE-2026-1709 keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c2b5451b35' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Keylime Updates Address Critical Vulnerabilities in Archlinux and Fedora Keylime has released updates to address two critical vulnerabilities, CVE-2026-1709 and CVE-2025-13609, affecting its remote boot attestation and integrity measurement solutions. Users are advised to update to keylime version 7.14.1 and keylime-agent-rust version 0.2.9 to mitigate these issues. The vulnerabilities were published on February 6, 2026, and November 24, 2025, respectively. 5 sources 27

Extracted Entities

Companies (1)

Fedora

CVEs (2)

CVE-2025-13609 CVE-2026-1709