A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade emacsUpgrade emacs-filesystemUpgrade emacs-lucidUpgrade emacs-terminalUpgrade emacs-noxUpgrade emacs-common | Oct 12, 2026 | Oct 12, 2026 |
| Amazon_linux_2023 | — | Upgrade emacsUpgrade emacs-filesystemUpgrade emacs-nox-debuginfoUpgrade emacs-terminalUpgrade emacs-develUpgrade emacs-debugsourceUpgrade emacs-lucid-debuginfoUpgrade emacs-lucidUpgrade emacs-commonUpgrade emacs-noxUpgrade emacs-debuginfoUpgrade emacs-common-debuginfo | Sep 30, 2026 | Aug 25, 2026 |
| Gentoo Linux | — | Upgrade app-editors/emacs. | Aug 26, 2026 | Aug 24, 2026 |
| Redhat_linux | — | No solution existsUpgrade emacs-lucid-debuginfoUpgrade emacsUpgrade emacs-lucidUpgrade emacs-nox-debuginfoUpgrade emacs-filesystemUpgrade emacs-terminalUpgrade emacs-debugsourceUpgrade emacs-noxUpgrade emacs-commonUpgrade emacs-debuginfoUpgrade emacs-common-debuginfo | Aug 27, 2026 | Aug 21, 2026 |
| Rocky_linux | — | Upgrade emacs-nox-debuginfoUpgrade emacs-lucid-debuginfoUpgrade emacsUpgrade emacs-debugsourceUpgrade emacs-common-debuginfoUpgrade emacs-noxUpgrade emacs-debuginfoUpgrade emacs-commonUpgrade emacs-lucid | Oct 15, 2026 | Oct 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub