zooba · Feb 8, 2023 · Jan 24, 2023 · Jan 24, 2023 · Jan 24, 2023 · Jan 24, 2023
@@ -1480,7 +1480,19 @@ def _execute_child(self, args, executable, preexec_fn, close_fds,
             if shell:
                 startupinfo.dwFlags |= _winapi.STARTF_USESHOWWINDOW
                 startupinfo.wShowWindow = _winapi.SW_HIDE
-                comspec = os.environ.get("COMSPEC", "cmd.exe")
+                # gh-101283: with no full path, Windows looks into a
+                # current directory first so no plain "cmd.exe".
+                system_drive = os.environ.get('SystemDrive') or 'C:'
+                system_root = os.environ.get('SystemRoot') or os.path.join(
+                    system_drive, 'Windows')
+                comspec = os.environ.get('ComSpec') or os.path.join(
+                    system_root, 'System32', 'cmd.exe')
+                if not os.path.isfile(comspec):
+                    # Windows is installed into a non-standard location
+                    # or the system environment variables are broken.
+                    # It's highly unlikely and we cannot help here.
+                    comspec = "cmd.exe"
+
                 args = '{} /c "{}"'.format (comspec, args)
 
             if cwd is not None:

diff --git a/Misc/NEWS.d/next/Security/2023-01-24-16-12-00.gh-issue-101283.9tqu39.rst b/Misc/NEWS.d/next/Security/2023-01-24-16-12-00.gh-issue-101283.9tqu39.rst
@@ -0,0 +1,3 @@
+:meth:`subprocess.Popen.__init__` no-``COMSPEC`` fallback now looks for an
+absolute path ``C:\\WINDOWS\\system32\\cmd.exe`` before falling back further
+to an old ``cmd.exe``. Patch by Oleg Iarygin.