CVE-2021-34422

CVE-2021-34422 is a critical path traversal vulnerability affecting Keybase Client for Windows versions prior to 5.7.0. A malicious actor could upload a specially crafted file to a shared folder, potentially leading to unintended application execution or, if leveraged via public folder sharing, remote code execution on a victim's machine. This vulnerability carries a CVSS score of 9.0 (CRITICAL) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, requiring user interaction. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.