CVE-2024-29188

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action behind WiX's `RemoveFolderEx` functionality could allow a standard user to delete protected directories. `RemoveFolderEx` deletes an entire directory tree during installation or uninstallation. It does so by recursing every subdirectory starting at a specified directory and adding each subdirectory to the list of directories Windows Installer should delete. If the setup author instructed `RemoveFolderEx` to delete a per-user folder from a per-machine installer, an attacker could create a directory junction in that per-user folder pointing to a per-machine, protected directory. Windows Installer, when executing the per-machine installer after approval by an administrator, would delete the target of the directory junction. This vulnerability is fixed in 3.14.1 and 4.0.5.

• CWE-59

• https://github.com/wixtoolset/issues/security/advisories/GHSA-jx4p-m4wm-vvjg
• https://github.com/wixtoolset/wix/commit/2e5960b575881567a8807e6b8b9c513138b19742
• https://github.com/wixtoolset/wix3/commit/93eeb5f6835776694021f66d4226c262c67d487a
• https://github.com/wixtoolset/issues/security/advisories/GHSA-jx4p-m4wm-vvjg
• https://github.com/wixtoolset/wix/commit/2e5960b575881567a8807e6b8b9c513138b19742
• https://github.com/wixtoolset/wix3/commit/93eeb5f6835776694021f66d4226c262c67d487a

Published

Mar 24, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29182Collabora Online is a collaborative online office suite base…6.1
• CVE-2024-29183OpenRASP is a RASP solution that directly integrates its pro…6.1
• CVE-2024-29184FreeScout is a self-hosted help desk and shared mailbox. A S…8
• CVE-2024-29185FreeScout is a self-hosted help desk and shared mailbox. Ver…9
• CVE-2024-29186Bref is an open-source project that helps users go serverles…5.3
• CVE-2024-29187WiX toolset lets developers create installers for Windows In…7.3
• CVE-2024-29189PyAnsys Geometry is a Python client library for the Ansys Ge…7.8
• CVE-2024-2919The Gutenberg Blocks by Kadence Blocks – Page Builder Featur…5.4
• CVE-2024-29190Mobile Security Framework (MobSF) is a pen-testing, malware …7.5
• CVE-2024-29191gotortc is a camera streaming application. Versions 1.8.5 an…6.1
• CVE-2024-29192gotortc is a camera streaming application. Versions 1.8.5 an…8.8
• CVE-2024-29193gotortc is a camera streaming application. Versions 1.8.5 an…6.1