CVE-2021-34426

Affected product: Keybase Client for Windows. Vulnerable in versions before 5.6.0 when a user runs the command “keybase git lfs-config” on the command line. A malicious actor with write access to a user’s Git repository could potentially execute arbitrary Windows commands on the user’s local syst...