CVE-2018-18629

An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary.

• CWE-426

• https://blog.mirch.io/2018/12/21/cve-2018-18629-keybase-linux-privilege-escalation/Exploit, Third Party Advisory
• https://hackerone.com/reports/426944Exploit, Patch, Third Party Advisory
• https://keybase.io/docs/secadv/kb002Exploit, Vendor Advisory
• https://blog.mirch.io/2018/12/21/cve-2018-18629-keybase-linux-privilege-escalation/Exploit, Third Party Advisory
• https://hackerone.com/reports/426944Exploit, Patch, Third Party Advisory
• https://keybase.io/docs/secadv/kb002Exploit, Vendor Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18622An issue was discovered in Waimai Super Cms 20150505. There …
• CVE-2018-18623Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" scree…6.1
• CVE-2018-18624Grafana 5.3.1 has XSS via a column style on the "Dashboard >…6.1
• CVE-2018-18625Grafana 5.3.1 has XSS via a link on the "Dashboard > All Pan…6.1
• CVE-2018-18626An issue was discovered in PHPYun V4.6. There is a vulnerabi…
• CVE-2018-18628An issue was discovered in Pippo 1.11.0. The function Serial…
• CVE-2018-18630A vulnerability was found in McKesson Cardiology product 13.…7.8
• CVE-2018-18631mailboxd component in Synacor Zimbra Collaboration Suite 8.6…
• CVE-2018-18635www/guis/admin/application/controllers/UserController.php in…
• CVE-2018-18636XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via …
• CVE-2018-18638A command injection vulnerability in the setup API in the Ne…
• CVE-2018-18640An issue was discovered in GitLab Community and Enterprise E…