Keylime’s verifier generates a TPM quote using a static nonce instead of a cryptographically random value. In CWE‑1241 terminology, the challenge is inadequately invalidated, allowing an attacker with local root privileges to pre‑compute valid quote responses and replay them later. This bypass makes the system believe the host remains in a trustworthy state even after compromise, effectively granting silent persistence.

The vulnerability exists in the Keylime attestation framework shipped with Red Hat Enterprise Linux 9 and 10, and only affects the push‑model deployment. No other Red Hat products or non‑push deployments are impacted.

The CVSS score of 6.3 indicates moderate severity, and the EPSS score is not available; the issue is not listed in the CISA KEV catalog. Exploitation requires the attacker to have local root access to the enrolled host, making the attack vector local. While TPM clock monotonicity checks and the 10‑second attestation timeout provide some protection, a skilled root user can still gather large numbers of quotes during that window, so the mitigation is not fully reliable.