Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 2.6%
exploitation probability
2.6%top 15% of all CVEs
observed exploitation
nono source reports it
A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
emacsRed Hat · Builds for Red Hat OpenShift 1.3.2Red Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9.4 Extended Update SupportReferences
https://access.redhat.com/errata/RHSA-2025:1915https://access.redhat.com/errata/RHSA-2025:1917https://access.redhat.com/errata/RHSA-2025:1961https://access.redhat.com/errata/RHSA-2025:1962https://access.redhat.com/errata/RHSA-2025:1963https://access.redhat.com/errata/RHSA-2025:1964https://access.redhat.com/errata/RHSA-2025:2022https://access.redhat.com/errata/RHSA-2025:2130https://access.redhat.com/errata/RHSA-2025:2157https://access.redhat.com/errata/RHSA-2025:2195https://access.redhat.com/errata/RHSA-2025:2754https://access.redhat.com/security/cve/CVE-2025-1244