THREATOPS
THREAT OPSThreat News › Emacs zero-click local command execution via TRAMP

Emacs zero-click local command execution via TRAMP

lowoss_secPublished 2026-08-21

<p>Posted by Sean Whitton on Aug 21</p>Bas Alberts of the GitHub Security Lab discovered a local command<br /> execution vulnerability in GNU Emacs 30.2 onwards, and possibly earlier.<br /> <br /> I am attaching a fix prepared by Michael Albinus, the TRAMP maintainer.<br /> <br /> Here is Bas&apos;s description of the problem (edited down a bit).<br /> <br /> --8&lt;---------------cut here--------

Original source: https://seclists.org/oss-sec/2026/q3/543