Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98195.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-98195
Upstream
  • CVE-2026-79992
Published
2026-08-25T18:18:06Z
Modified
2026-08-30T05:26:50Z
Summary
CVE-2026-79992 affecting package emacs 29.4-4
Details

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.

References

Affected packages

Azure Linux:3 / emacs

Package

Name
emacs
Purl
pkg:rpm/azure-linux/emacs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
29.4-4

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98195.json"