CVE-2024-29864: 89luca89 Distrobox

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Distrobox before 1.7.0.1 allows attackers to execute arbitrary code via command injection into exported executables.

Affected products

• 89luca89 Distrobox: before 1.7.0.1 (fixed in 1.7.0.1)

Published 2024-03-21. Last modified 2026-06-17.