CVE-2021-34422

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a specially crafted file name which could allow a user to execute an application which was not intended on their host machine. If a malicious user leveraged this issue with the public folder sharing feature of the Keybase client, this could lead to remote code execution.

• CWE-22

• https://explore.zoom.us/en/trust/security/security-bulletinVendor Advisory
• https://explore.zoom.us/en/trust/security/security-bulletinVendor Advisory

Published

Nov 11, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34417The network proxy page on the web portal for the Zoom On-Pre…7.2
• CVE-2021-34418The login routine of the web console in the Zoom On-Premise …5.3
• CVE-2021-34419In the Zoom Client for Meetings for Ubuntu Linux before vers…5.3
• CVE-2021-3442A flaw was found in the Red Hat OpenShift API Management pro…5.4
• CVE-2021-34420The Zoom Client for Meetings for Windows installer before ve…7.4
• CVE-2021-34421The Keybase Client for Android before version 5.8.0 and the …4.3
• CVE-2021-34423A buffer overflow vulnerability was discovered in Zoom Clien…9.8
• CVE-2021-34424A vulnerability was discovered in the Zoom Client for Meetin…7.5
• CVE-2021-34425The Zoom Client for Meetings before version 5.7.3 (for Andro…6.1
• CVE-2021-34426A vulnerability was discovered in the Keybase Client for Win…7.8
• CVE-2021-34427In Eclipse BIRT versions 4.8.0 and earlier, an attacker can …9.8
• CVE-2021-34428For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, …3.5