CVE-2024-29032

Qiskit IBM Runtime is an environment that streamlines quantum computations and provides optimal implementations of the Qiskit quantum computing SDK. Starting in version 0.1.0 and prior to version 0.21.2, deserializing json data using `qiskit_ibm_runtime.RuntimeDecoder` can lead to arbitrary code execution given a correctly formatted input string. Version 0.21.2 contains a fix for this issue.

• CWE-502

• https://github.com/Qiskit/qiskit-ibm-runtime/blob/16e90f475e78a9d2ae77daa139ef750cfa84ca82/qiskit_ibm_runtime/utils/json.py#L156-L159Issue Tracking
• https://github.com/Qiskit/qiskit-ibm-runtime/commit/b78fca114133051805d00043a404b25a33835f4dIssue Tracking
• https://github.com/Qiskit/qiskit-ibm-runtime/security/advisories/GHSA-x4x5-jv3x-9c7mExploit, Vendor Advisory
• https://github.com/Qiskit/qiskit-ibm-runtime/blob/16e90f475e78a9d2ae77daa139ef750cfa84ca82/qiskit_ibm_runtime/utils/json.py#L156-L159Issue Tracking
• https://github.com/Qiskit/qiskit-ibm-runtime/commit/b78fca114133051805d00043a404b25a33835f4dIssue Tracking
• https://github.com/Qiskit/qiskit-ibm-runtime/security/advisories/GHSA-x4x5-jv3x-9c7mExploit, Vendor Advisory

Published

Mar 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29027Parse Server is an open source backend that can be deployed …9
• CVE-2024-29028memos is a privacy-first, lightweight note-taking service. I…5.3
• CVE-2024-29029memos is a privacy-first, lightweight note-taking service. I…6.1
• CVE-2024-2903A vulnerability was found in Tenda AC7 15.03.06.44. It has b…8.8
• CVE-2024-29030memos is a privacy-first, lightweight note-taking service. I…5.3
• CVE-2024-29031Meshery is an open source, cloud native manager that enables…7.5
• CVE-2024-29033OAuthenticator provides plugins for JupyterHub to use common…9.1
• CVE-2024-29034CarrierWave is a solution for file uploads for Rails, Sinatr…6.1
• CVE-2024-29035Umbraco is an ASP.NET CMS. Failing webhooks logs are availab…5.3
• CVE-2024-29036Saleor Storefront is software for building e-commerce experi…6.5
• CVE-2024-29037datahub-helm provides the Kubernetes Helm charts for deployi…9.1
• CVE-2024-29038tpm2-tools is the source repository for the Trusted Platform…3.3