Vulnerabilities > CVE-2021-34426 - Unspecified vulnerability in Keybase

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

keybase

NVD

Published: 2021-12-14

Updated: 2022-03-29

Summary

A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the "keybase git lfs-config" command on the command-line. In versions prior to 5.6.0, a malicious actor with write access to a user\'s Git repository could leverage this vulnerability to potentially execute arbitrary Windows commands on a user\'s local system.

Vulnerable Configurations

Part	Description	Count
Application	Keybase Keybase Keybase 0.1.1 Keybase Keybase 0.1.2 Keybase Keybase 0.1.3 Keybase Keybase 0.1.4 Keybase Keybase 0.1.5 Keybase Keybase 0.1.6 Keybase Keybase 0.1.7 Keybase Keybase 0.1.8 Keybase Keybase 0.8.1 Keybase Keybase 1.0.0 Keybase Keybase 1.0.0-14 Keybase Keybase 1.0.0-15 Keybase Keybase 1.0.0-16 Keybase Keybase 1.0.0-17 Keybase Keybase 1.0.0-18 Keybase Keybase 1.0.0-19 Keybase Keybase 1.0.0-20 Keybase Keybase 1.0.0-21 Keybase Keybase 1.0.0-22 Keybase Keybase 1.0.0-23 Keybase Keybase 1.0.0-24 Keybase Keybase 1.0.0-25 Keybase Keybase 1.0.0-26 Keybase Keybase 1.0.0-27 Keybase Keybase 1.0.0-28 Keybase Keybase 1.0.0-29 Keybase Keybase 1.0.0-29A Keybase Keybase 1.0.0-29B Keybase Keybase 1.0.0-29C Keybase Keybase 1.0.0-29D Keybase Keybase 1.0.0-29E Keybase Keybase 1.0.0-29F Keybase Keybase 1.0.0-29G Keybase Keybase 1.0.0-30 Keybase Keybase 1.0.0-31 Keybase Keybase 1.0.0-32 Keybase Keybase 1.0.0-33 Keybase Keybase 1.0.0-34 Keybase Keybase 1.0.0-35 Keybase Keybase 1.0.0-36 Keybase Keybase 1.0.0-37 Keybase Keybase 1.0.0-38 Keybase Keybase 1.0.0-39 Keybase Keybase 1.0.0-40 Keybase Keybase 1.0.0-41 Keybase Keybase 1.0.0-42 Keybase Keybase 1.0.0-43 Keybase Keybase 1.0.0-44 Keybase Keybase 1.0.0-45 Keybase Keybase 1.0.0-46 Keybase Keybase 1.0.0-47 Keybase Keybase 1.0.1-0 Keybase Keybase 1.0.2-0 Keybase Keybase 1.0.3-0 Keybase Keybase 1.0.4-0 Keybase Keybase 1.0.4-4 Keybase Keybase 1.0.5-0 Keybase Keybase 1.0.5-1 Keybase Keybase 1.0.5-2 Keybase Keybase 1.0.5-3 Keybase Keybase 1.0.5-4 Keybase Keybase 1.0.5-5 Keybase Keybase 1.0.5-6 Keybase Keybase 1.0.5-7 Keybase Keybase 1.0.6-0 Keybase Keybase 1.0.6-1 Keybase Keybase 1.0.7-0 Keybase Keybase 1.0.8-0 Keybase Keybase 1.0.9-0 Keybase Keybase 1.0.9-1 Keybase Keybase 1.0.10-0 Keybase Keybase 1.0.11-0 Keybase Keybase 1.0.12-0 Keybase Keybase 1.0.13-0 Keybase Keybase 1.0.14-0 Keybase Keybase 1.0.14-1 Keybase Keybase 1.0.15 Keybase Keybase 1.0.16 Keybase Keybase 1.0.17 Keybase Keybase 1.0.18 Keybase Keybase 1.0.19 Keybase Keybase 1.0.20 Keybase Keybase 1.0.21 Keybase Keybase 1.0.22 Keybase Keybase 1.0.27 Keybase Keybase 1.0.28 Keybase Keybase 1.0.29 Keybase Keybase 1.0.30 Keybase Keybase 1.0.31 Keybase Keybase 1.0.33 Keybase Keybase 1.0.34 Keybase Keybase 1.0.36 Keybase Keybase 1.0.39 Keybase Keybase 1.0.40 Keybase Keybase 1.0.41 Keybase Keybase 1.0.42 Keybase Keybase 1.0.43 Keybase Keybase 1.0.44 Keybase Keybase 1.0.46 Keybase Keybase 1.0.47 Keybase Keybase 1.0.48 Keybase Keybase 2.0.0 Keybase Keybase 2.1.0 Keybase Keybase 2.1.1 Keybase Keybase 2.1.2 Keybase Keybase 2.3.0 Keybase Keybase 2.5.0 Keybase Keybase 2.5.1 Keybase Keybase 2.5.2 Keybase Keybase 2.6.0 Keybase Keybase 2.6.2 Keybase Keybase 2.7.0 Keybase Keybase 2.7.2 Keybase Keybase 2.7.3 Keybase Keybase 2.7.4 Keybase Keybase 2.8.0 Keybase Keybase 2.8.0-20181023124437 Keybase Keybase 2.9.0 Keybase Keybase 2.10.0 Keybase Keybase 2.10.1 Keybase Keybase 2.11.0 Keybase Keybase 2.12.2 Keybase Keybase 2.12.6 Keybase Keybase 2.13.1 Keybase Keybase 2.13.2 Keybase Keybase 3.0.0 Keybase Keybase 3.1.0 Keybase Keybase 3.1.1 Keybase Keybase 3.1.2 Keybase Keybase 3.2.1 Keybase Keybase 3.2.2 Keybase Keybase 4.0.0 Keybase Keybase 4.1.0 Keybase Keybase 4.2.0 Keybase Keybase 4.2.1 Keybase Keybase 4.3.0 Keybase Keybase 4.3.1 Keybase Keybase 4.3.2 Keybase Keybase 4.4.0 Keybase Keybase 4.4.1 Keybase Keybase 4.4.2 Keybase Keybase 4.5.0 Keybase Keybase 4.6.0 Keybase Keybase 4.6.1 Keybase Keybase 4.7.0 Keybase Keybase 4.7.1 Keybase Keybase 4.7.2 Keybase Keybase 5.0.0 Keybase Keybase 5.1.0 Keybase Keybase 5.1.1 Keybase Keybase 5.2.0 Keybase Keybase 5.2.1 Keybase Keybase 5.3.0 Keybase Keybase 5.3.1 Keybase Keybase 5.4.0 Keybase Keybase 5.4.1 Keybase Keybase 5.4.2 Keybase Keybase 5.5.0 Keybase Keybase 5.5.1 Keybase Keybase 5.5.2	183
OS	Microsoft Microsoft Windows -	1

References

https://explore.zoom.us/en/trust/security/security-bulletin