Vulnerability · Published Feb 12, 2025 · Assigned by redhat
CVE-2025-1244Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme
High 8.8
In plain English
A high-severity OS command injection in emacs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 86% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)2.6%top 14.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | emacs | 1:26.1-13.el8_10 | ALSA-2025:1917 |
| AlmaLinux:9 | emacs | 1:27.2-11.el9_5.1 | ALSA-2025:1915 |
| AlmaLinux:8 | emacs-common | 1:26.1-13.el8_10 | ALSA-2025:1917 |
| AlmaLinux:9 | emacs-common | 1:27.2-11.el9_5.1 | ALSA-2025:1915 |
| AlmaLinux:8 | emacs-filesystem | 1:26.1-13.el8_10 | ALSA-2025:1917 |
| AlmaLinux:9 | emacs-filesystem | 1:27.2-11.el9_5.1 | ALSA-2025:1915 |
| AlmaLinux:8 | emacs-lucid | 1:26.1-13.el8_10 | ALSA-2025:1917 |
| AlmaLinux:9 | emacs-lucid | 1:27.2-11.el9_5.1 | ALSA-2025:1915 |
| AlmaLinux:8 | emacs-nox | 1:26.1-13.el8_10 | ALSA-2025:1917 |
| AlmaLinux:9 | emacs-nox | 1:27.2-11.el9_5.1 | ALSA-2025:1915 |
| AlmaLinux:8 | emacs-terminal | 1:26.1-13.el8_10 | ALSA-2025:1917 |
| Debian:12 | emacs | 1:28.2+1-15+deb12u4 | DEBIAN-CVE-2025-1244 |
| Debian:12 | emacs | 1:28.2+1-15+deb12u4 | DSA-5871-1 |
| Debian:13 | emacs | 1:30.1+1-1 | DEBIAN-CVE-2025-1244 |
| Debian:14 | emacs | 1:30.1+1-1 | DEBIAN-CVE-2025-1244 |
| Rocky Linux:8 | emacs | 1:26.1-13.el8_10 | RLSA-2025:1917 |
| Rocky Linux:9 | emacs | 1:27.2-11.el9_5.1 | RLSA-2025:1915 |
| Ubuntu:22.04:LTS | xemacs21 | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:24.04:LTS | xemacs21 | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:25.10 | xemacs21 | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:26.04:LTS | xemacs21 | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:26.10 | xemacs21 | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:22.04:LTS | xemacs21-packages | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:24.04:LTS | xemacs21-packages | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:25.10 | xemacs21-packages | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:26.04:LTS | xemacs21-packages | no fix listed | UBUNTU-CVE-2025-1244 |
| Ubuntu:26.10 | xemacs21-packages | no fix listed | UBUNTU-CVE-2025-1244 |
Affected products (as reported)
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- RHSA-2025:1915 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:1917 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:1961 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:1962 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:1963 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:1964 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:2022 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:2130 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:2157 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:2195 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:2754 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-1244 vdb-entry, x_refsource_REDHAT
- RHBZ#2345150 issue-tracking, x_refsource_REDHAT
- https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=820f0793f0b46448928905552726c1f1b999062f
- https://debbugs.gnu.org/cgi/bugreport.cgi?bug=66390
- https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-30.1
- http://www.openwall.com/lists/oss-security/2025/03/01/2
- https://lists.debian.org/debian-lts-announce/2025/02/msg00033.html