Critical severity9.8NVD Advisory· Published Jan 31, 2019· Updated Jun 17, 2026

CVE-2019-7249

Description

In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Keybase/Keybaseinferred3 versions
<2.12.6+ 2 more
- (no CPE)range: <2.12.6
- cpe:2.3:a:keybase:keybase:*:*:*:*:*:macos:*:*range: <2.12.6
- (no CPE)range: <2.12.6

Patches

Vulnerability mechanics

References

hackerone.com/reports/471739nvdExploitPatchThird Party Advisory
keybase.io/docs/secadv/kb004nvdExploitPatchVendor Advisory
www.securityfocus.com/bid/106824nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000