Vulnerability · Published Aug 25, 2026 · Assigned by redhat
CVE-2026-79992Emacs: emacs: command injection via crafted filenames in tramp
High 7.8
In plain English
A high-severity OS command injection in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | emacs | 1:29.4-14.el10_2.3 | ALSA-2026:84591 |
| AlmaLinux:8 | emacs | 1:26.1-15.el8_10.2 | ALSA-2026:80506 |
| AlmaLinux:9 | emacs | 1:27.2-18.el9_8.2 | ALSA-2026:80507 |
| AlmaLinux:10 | emacs-common | 1:29.4-14.el10_2.3 | ALSA-2026:84591 |
| AlmaLinux:8 | emacs-common | 1:26.1-15.el8_10.2 | ALSA-2026:80506 |
| AlmaLinux:9 | emacs-common | 1:27.2-18.el9_8.2 | ALSA-2026:80507 |
| AlmaLinux:10 | emacs-filesystem | 1:29.4-14.el10_2.3 | ALSA-2026:84591 |
| AlmaLinux:8 | emacs-filesystem | 1:26.1-15.el8_10.2 | ALSA-2026:80506 |
| AlmaLinux:9 | emacs-filesystem | 1:27.2-18.el9_8.2 | ALSA-2026:80507 |
| AlmaLinux:10 | emacs-lucid | 1:29.4-14.el10_2.3 | ALSA-2026:84591 |
| AlmaLinux:8 | emacs-lucid | 1:26.1-15.el8_10.2 | ALSA-2026:80506 |
| AlmaLinux:9 | emacs-lucid | 1:27.2-18.el9_8.2 | ALSA-2026:80507 |
| AlmaLinux:8 | emacs-nox | 1:26.1-15.el8_10.2 | ALSA-2026:80506 |
| AlmaLinux:9 | emacs-nox | 1:27.2-18.el9_8.2 | ALSA-2026:80507 |
| AlmaLinux:10 | emacs-nw | 1:29.4-14.el10_2.3 | ALSA-2026:84591 |
| AlmaLinux:8 | emacs-terminal | 1:26.1-15.el8_10.2 | ALSA-2026:80506 |
| Debian:12 | emacs | no fix listed | DEBIAN-CVE-2026-79992 |
| Debian:13 | emacs | no fix listed | DEBIAN-CVE-2026-79992 |
| Debian:14 | emacs | no fix listed | DEBIAN-CVE-2026-79992 |
| Rocky Linux:10 | emacs | 1:29.4-14.el10_2.3 | RLSA-2026:84591 |
| Rocky Linux:8 | emacs | 1:26.1-15.el8_10.2 | RLSA-2026:80506 |
| Rocky Linux:9 | emacs | 1:27.2-18.el9_8.2 | RLSA-2026:80507 |
| Ubuntu:26.10 | emacs | no fix listed | UBUNTU-CVE-2026-79992 |
| Ubuntu:22.04:LTS | xemacs21 | no fix listed | UBUNTU-CVE-2026-79992 |
| Ubuntu:24.04:LTS | xemacs21 | no fix listed | UBUNTU-CVE-2026-79992 |
| Ubuntu:26.04:LTS | xemacs21 | no fix listed | UBUNTU-CVE-2026-79992 |
| Ubuntu:26.10 | xemacs21 | no fix listed | UBUNTU-CVE-2026-79992 |
| Ubuntu:22.04:LTS | xemacs21-packages | no fix listed | UBUNTU-CVE-2026-79992 |
| Ubuntu:24.04:LTS | xemacs21-packages | no fix listed | UBUNTU-CVE-2026-79992 |
| Ubuntu:26.04:LTS | xemacs21-packages | no fix listed | UBUNTU-CVE-2026-79992 |
| Ubuntu:26.10 | xemacs21-packages | no fix listed | UBUNTU-CVE-2026-79992 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- RHSA-2026:80506 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:80507 vendor-advisory, x_refsource_REDHAT
- RHSA-2026:84591 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2026-79992 vdb-entry, x_refsource_REDHAT
- RHBZ#2523665 issue-tracking, x_refsource_REDHAT
- http://www.openwall.com/lists/oss-security/2026/08/26/15
- http://www.openwall.com/lists/oss-security/2026/10/11/1
- http://www.openwall.com/lists/oss-security/2026/10/14/4