THREAT OPS › Threat News › Emacs zero-click local command execution via TRAMP
Emacs zero-click local command execution via TRAMP
<p>Posted by Sean Whitton on Aug 21</p>Bas Alberts of the GitHub Security Lab discovered a local command<br /> execution vulnerability in GNU Emacs 30.2 onwards, and possibly earlier.<br /> <br /> I am attaching a fix prepared by Michael Albinus, the TRAMP maintainer.<br /> <br /> Here is Bas's description of the problem (edited down a bit).<br /> <br /> --8<---------------cut here--------
Original source: https://seclists.org/oss-sec/2026/q3/543