id: PYSEC-2026-1488
published: "2026-07-07T14:34:49.823034Z"
modified: "2026-07-07T14:34:49.823034Z"
aliases:
- CVE-2025-1057
- GHSA-9jxq-5x44-gx23
summary: Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0
details: "### Impact\nThe Keylime `registrar` implemented more strict type checking on version 7.12.0. As a result, when updated to version 7.12.0, the `registrar` will not accept the format of the data previously stored in the database by versions  >= 7.8.0, raising an exception.\n\nThis makes the Keylime `registrar` vulnerable to a Denial-of-Service attack in an update scenario, as an attacker could populate the `registrar` database by creating multiple valid agent registrations with different UUIDs while the version is still < 7.12.0. Then, when the Keylime `registrar` is updated to the 7.12.0 version, any query to the database matching any of the entries populated by the attacker will result in failure.\n\n### Patches\nUsers should upgrade to versions >= 7.12.1\n\n### Workarounds\n- Remove the registrar database and re-register all agents\n\n### Credit\n\nReported by: Anderson Toshiyuki Sasaki/@ansasaki\nPatched by: Anderson Toshiyuki Sasaki/@ansasaki"
affected:
- package:
    name: keylime
    ecosystem: PyPI
    purl: pkg:pypi/keylime
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: 7.12.0
    - fixed: 7.12.1
  versions:
  - 7.12.0
references:
- type: WEB
  url: https://github.com/keylime/keylime/security/advisories/GHSA-9jxq-5x44-gx23
- type: ADVISORY
  url: https://nvd.nist.gov/vuln/detail/CVE-2025-1057
- type: WEB
  url: https://github.com/keylime/keylime/commit/e08b10d86c3717006774e787542c190e2ba24fc7
- type: WEB
  url: https://access.redhat.com/security/cve/CVE-2025-1057
- type: WEB
  url: https://bugzilla.redhat.com/show_bug.cgi?id=2343894
- type: PACKAGE
  url: https://github.com/keylime/keylime
- type: PACKAGE
  url: https://pypi.org/project/keylime
- type: ADVISORY
  url: https://github.com/advisories/GHSA-9jxq-5x44-gx23
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L