CVE-2024-29189

PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/product_instance.py, upon calling this method _start_program directly, users could exploit its usage to perform malicious operations on the current machine where the script is ran. This vulnerability is fixed in 0.3.3 and 0.4.12.

• CWE-78

• https://bandit.readthedocs.io/en/1.7.8/plugins/b602_subprocess_popen_with_shell_equals_true.htmlTechnical Description
• https://github.com/ansys/pyansys-geometry/blob/52cba1737a8a7812e5430099f715fa2160ec007b/src/ansys/geometry/core/connection/product_instance.py#L403-L428Patch
• https://github.com/ansys/pyansys-geometry/commit/902071701c4f3a8258cbaa46c28dc0a65442d1bcPatch
• https://github.com/ansys/pyansys-geometry/commit/f82346b9432b06532e84f3278125f5879b4e9f3fPatch
• https://github.com/ansys/pyansys-geometry/pull/1076Issue Tracking
• https://github.com/ansys/pyansys-geometry/pull/1077Issue Tracking
• https://github.com/ansys/pyansys-geometry/security/advisories/GHSA-38jr-29fh-w9vmExploit, Vendor Advisory
• https://bandit.readthedocs.io/en/1.7.8/plugins/b602_subprocess_popen_with_shell_equals_true.htmlTechnical Description
• https://github.com/ansys/pyansys-geometry/blob/52cba1737a8a7812e5430099f715fa2160ec007b/src/ansys/geometry/core/connection/product_instance.py#L403-L428Patch
• https://github.com/ansys/pyansys-geometry/commit/902071701c4f3a8258cbaa46c28dc0a65442d1bcPatch
• https://github.com/ansys/pyansys-geometry/commit/f82346b9432b06532e84f3278125f5879b4e9f3fPatch
• https://github.com/ansys/pyansys-geometry/pull/1076Issue Tracking
• https://github.com/ansys/pyansys-geometry/pull/1077Issue Tracking
• https://github.com/ansys/pyansys-geometry/security/advisories/GHSA-38jr-29fh-w9vmExploit, Vendor Advisory

Published

Mar 26, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29183OpenRASP is a RASP solution that directly integrates its pro…6.1
• CVE-2024-29184FreeScout is a self-hosted help desk and shared mailbox. A S…8
• CVE-2024-29185FreeScout is a self-hosted help desk and shared mailbox. Ver…9
• CVE-2024-29186Bref is an open-source project that helps users go serverles…5.3
• CVE-2024-29187WiX toolset lets developers create installers for Windows In…7.3
• CVE-2024-29188WiX toolset lets developers create installers for Windows In…7.9
• CVE-2024-2919The Gutenberg Blocks by Kadence Blocks – Page Builder Featur…5.4
• CVE-2024-29190Mobile Security Framework (MobSF) is a pen-testing, malware …7.5
• CVE-2024-29191gotortc is a camera streaming application. Versions 1.8.5 an…6.1
• CVE-2024-29192gotortc is a camera streaming application. Versions 1.8.5 an…8.8
• CVE-2024-29193gotortc is a camera streaming application. Versions 1.8.5 an…6.1
• CVE-2024-29194OneUptime is a solution for monitoring and managing online s…8.3