Local Code Execution Vulnerability in Emacs TRAMP by Red Hat
CVE-2026-79992

7.8HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
25 August 2026

What is CVE-2026-79992?

A vulnerability exists in Emacs TRAMP that allows local attackers to exploit the system by processing maliciously crafted filenames. This flaw arises from the insecure concatenation of login arguments, which are subsequently relayed to a local shell without adequate sanitization. Successful exploitation of this vulnerability can lead to arbitrary code execution, posing significant security risks to affected systems.

References

https://access.redhat.com/security/cve/CVE-2026-79992
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2523665
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.