CVE-2019-7249

In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs.

In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs.

En Keybase, en versiones anteriores a la 2.12.6 en macOS, "move RPC to the Helper" era propenso a errores TOCTOU (time-to-check-time-to-use) y también permitiría que un usuario del sistema (que no tiene acceso root) manipulase la instalación de otra persona.