{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://github.com/keylime/keylime","packageName":"keylime","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThan":"7.14.2","status":"affected","version":"7.14.0","versionType":"semver"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"keylime","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.14.1-5.el10_2.1","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"keylime","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-6420","cwes":["CWE-1241"],"description":"A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hardcoded challenge nonce for Trusted Platform Module (TPM) quote attestation instead of a cryptographically random value. This allows the attacker to stockpile valid TPM quotes and replay them to evade detection after compromising the system. This issue affects only the push model deployment.","epss":{"date":"2026-11-05","percentile":0.01916,"score":0.00121},"exploits":[],"kev":null,"metrics":[{"score":6.3,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L","version":"3.1"}],"modifiedAt":1793915740613,"publishedAt":1778062779121,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:28582"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-6420"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458889"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"Primary fix (one-line change in keylime/models/verifier/evidence.py):\nBefore (vulnerable):\ndef generate_challenge(self, bit_length):\n\nself.challenge = Nonce.generate(bit_length)\n self.challenge = bytes.fromhex(\"49beed365aac777dae23564f5ad0ec\")\n\nAfter (fixed):\ndef generate_challenge(self, bit_length):\nself.challenge = Nonce.generate(bit_length)\n\nExisting partial mitigations (already active):\n\n1. TPM clock monotonicity check: limits each quote to one replay.\n2. Push attestation timeout (default 10s): constrains the quote generation window, but TPM throughput allows 50-200 quotes to be stockpiled in that time."}],"revision":"bfc7673ffff6f5774b7281c6893fd9ed2725b59a4d68d5c1688fe82dc98dbdea","sources":[{"modifiedAt":1793915740613,"name":"CNA: redhat","retrievedAt":1793917165785,"url":"https://www.cve.org/CVERecord?id=CVE-2026-6420"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793917187514,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-6420"}],"ssvc":{"assessedAt":1778075685881,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Keylime: keylime: security bypass due to hardcoded tpm quote nonce","updatedAt":1793917187514}