CVE-2019-16992: Keybase

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user's personal position on the semantics of an attestation.

Affected products

• Keybase Keybase: version 2.13.2 only

Published 2019-09-30. Last modified 2026-06-17.