AI description
CVE-2026-79992 is an OS command injection vulnerability affecting Emacs TRAMP (Transparent Remote Access, Multiple Protocols), tracked under CWE-78. The issue stems from how TRAMP handles login arguments, concatenating them without proper sanitization before passing the resulting string to a local shell. Because shell metacharacters are not neutralized, this behavior allows for command injection during filename processing. To exploit this vulnerability, a local attacker must influence a filename processed by Emacs, which can be achieved by placing a crafted file in a shared directory or convincing a user to open a specific path. When TRAMP processes the maliciously crafted filename, the injected shell commands are executed. This execution occurs within the security context of the Emacs process, typically running as the interactive user, which can lead to arbitrary code execution.
- Description
- A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.
- Source
- secalert@redhat.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- secalert@redhat.com
- CWE-78
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
6