{"action":"Upgrade qiskit-ibm-runtime to 0.21.2 or later.","affected":[{"fixed":"0.21.2","introduced":"0.1.0"}],"component":"qiskit-ibm-runtime","cve_ids":["CVE-2024-29032"],"ecosystem":"PyPI","epss":0.00372,"exploited":false,"fixed_versions":["0.21.2"],"ghsa_id":"GHSA-x4x5-jv3x-9c7m","id":"tcs_01M5KGW3QB4JQDVWY3T3YDWD53","modified_at":"2026-07-07T17:48:08.008702852Z","published_at":"2026-07-07T11:45:35.805433Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1858","https://github.com/Qiskit/qiskit-ibm-runtime/security/advisories/GHSA-x4x5-jv3x-9c7m","https://nvd.nist.gov/vuln/detail/CVE-2024-29032","https://github.com/Qiskit/qiskit-ibm-runtime/commit/b78fca114133051805d00043a404b25a33835f4d","https://github.com/Qiskit/qiskit-ibm-runtime","https://github.com/Qiskit/qiskit-ibm-runtime/blob/16e90f475e78a9d2ae77daa139ef750cfa84ca82/qiskit_ibm_runtime/utils/json.py#L156-L159","https://pypi.org/project/qiskit-ibm-runtime","https://github.com/advisories/GHSA-x4x5-jv3x-9c7m"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1858","url":"https://osv.dev/vulnerability/PYSEC-2026-1858"}],"summary":"`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code"}