PT-2021-20525 · Keybase · Keybase Client For Windows

Ryotak · Published 2021-12-14 · Updated 2022-03-29 · CVE-2021-34426

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Keybase Client for Windows versions prior to 5.6.0

Description: A vulnerability was discovered in the Keybase Client for Windows when a user executed the keybase git lfs-config command on the command-line. In versions prior to 5.6.0, a malicious actor with write access to a user's Git repository could leverage this vulnerability to potentially execute arbitrary Windows commands on a user's local system.

Recommendations: For versions prior to 5.6.0, update to version 5.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Git repository to minimize the risk of exploitation. Avoid executing the keybase git lfs-config command on the command-line until the issue is resolved.

Fix

Related Identifiers

CVE-2021-34426

Affected Products

Keybase Client For Windows

References · 4

• https://osv.dev/vulnerability/CVE-2021-34426 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34426 · Security Note
• https://t.me/cibsecurity/33965 · Telegram Post
• https://explore.zoom.us/en/trust/security/security-bulletin · Note