#1145049 emacs: Emacs zero-click local command execution via TRAMP

Package:
src:emacs
Source:
src:emacs
Submitter:
Salvatore Bonaccorso
Date:
2026-09-02 15:53:02 UTC
Severity:
normal
Tags:
#1145049#5
Date:
2026-08-21 18:54:51 UTC
From:
To:
Hi

As reported in
https://www.openwall.com/lists/oss-security/2026/08/21/1 a
Bas Alberts of the GitHub Security Lab discovered a local command
execution vulnerability was discovered via TRAMP.

Patch: https://www.openwall.com/lists/oss-security/2026/08/21/1/1

Regards,
Salvatore
#1145049#10
Date:
2026-08-25 17:21:39 UTC
From:
To:
Control: retitle -1 emacs: CVE-2026-79992: Emacs zero-click local command execution via TRAMP

This is CVE-2026-79992.

Regards,
Salvatore
#1145049#17
Date:
2026-09-02 15:50:05 UTC
From:
To:
Control: found -1 1:30.1+1-6
peculiar file name is not required. Arbitrary code may be executed on
opening a file having some innocent name. Even specific file name suffix
(extension) is not required.