CVE-2018-18629

An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-12-20

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Keybase (Keybase)

References

• https://blog.mirch.io/2018/12/21/cve-2018-18629-keybase-linux-privilege-escalation/
• https://hackerone.com/reports/426944
• https://keybase.io/docs/secadv/kb002