PT-2026-97277 · Emacs · Emacs
CVE-2026-96442
·
Published
2026-09-23
·
Updated
2026-09-28
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Emacs versions prior to 31.2
Description
A code execution flaw exists in the Flymake mode when using language backends other than Lisp. The issue occurs during syntax checking, where the software may execute arbitrary code contained within the edited file. Consequently, viewing or editing untrusted files can allow an attacker to execute arbitrary code with the privileges of the user running the application.
Recommendations
Update to version 31.2 or later.
Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Emacs