CVE-2026-79992
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Aug 25, 2026
CISA due date
—
The record
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61898 The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped… CWE-78
- CVE-2026-73623 GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that… CWE-78
- CVE-2026-73625 GitPython versions before 3.1.54 contain a remote code execution vulnerability in the… CWE-78
- CVE-2026-73077 Vim is an open source, command line text editor. CWE-78
- CVE-2026-15816 A flaw was found in dracut. CWE-78
- CVE-2026-67325 GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to… CWE-78
- CVE-2026-56389 GNU Bison allows for an execution of an arbitrary program during HTML report generation… CWE-78
- CVE-2026-50289 systeminformation is a System and OS information library for node.js. CWE-78