Skip to content
Critical Vulnerabilities in rust-keylime Affecting SUSE and openSUSE Users

Critical Vulnerabilities in rust-keylime Affecting SUSE and openSUSE Users

First seen 12 Nov 2026, 06:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 06:19 UTC
  • •Five critical vulnerabilities in rust-keylime have been patched.
  • •CVE-2026-115905 is rated critical with a CVSS score of 10.0.
  • •Users are advised to apply the patches immediately to mitigate risks.

SUSE and openSUSE have released updates for rust-keylime addressing multiple critical vulnerabilities. The flaws include CVE-2026-115905, a critical security control bypass, and CVE-2026-115906, an authentication bypass in AES encrypted entries, both published on 2026-10-26. Other vulnerabilities include denial of service issues and path traversal vulnerabilities. The first public proof-of-concept for CVE-2026-115905 was released on 2026-10-27, indicating potential. Users are urged to apply patches immediately using recommended installation methods. The vulnerabilities could allow attackers to bypass security controls and potentially exploit systems. The updates were released on 2026-11-06 for SUSE and 2026-11-10 for openSUSE.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 7h ago How this analysis works

Timeline

2026-10-26
Multiple CVEs published
Five vulnerabilities in rust-keylime were disclosed, including critical and high severity flaws.
Linuxsecurity
2026-10-26
CVE-2026-115906 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
First public PoC for CVE-2026-115905
A proof-of-concept for the critical vulnerability CVE-2026-115905 was released, indicating potential exploitation.
Linuxsecurity
2026-11-06
SUSE releases patches
SUSE released updates to address the vulnerabilities in rust-keylime, urging users to apply them.
Linuxsecurity
2026-11-10
openSUSE patches released
openSUSE released security updates for rust-keylime, including fixes for the critical vulnerabilities.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track CVE-2026-115905 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 3

Common questions

What versions are affected?
The vulnerabilities affect rust-keylime in SUSE and openSUSE systems, specifically in versions prior to the latest patches.
How urgent is the patching?
Patching is urgent due to the critical nature of CVE-2026-115905, which has a CVSS score of 10.0 and is actively exploited.
What are the patching methods?
Users can apply the patches using YaST online_update or the 'zypper patch' command.