PT-2025-6868 · Emacs+11 · Emacs+11

Maxim Nikulin · Published 2025-02-12 · Updated 2026-02-04 · CVE-2025-1244

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Emacs (affected versions not specified)

Description: A command injection flaw was found in the Emacs text editor, allowing a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. This can be achieved by tricking users into visiting a specially crafted website or an HTTP URL with a redirect. The flaw is related to improper handling of custom "man" URI schemes.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

ALSA-2025:1915

ALSA-2025:1917

AZL-56713

AZL-56729

BDU:2025-04327

CESA-2025_1917

CVE-2025-1244

DLA-4069-1

DSA-5871-1

INFSA-2025_1915

INFSA-2025_1917

MGASA-2025-0075

OESA-2025-1165

OPENSUSE-SU-2025:14767-1

OPENSUSE-SU-2025_0599-1

RHSA-2025:1915

RHSA-2025:1917

RHSA-2025:1961

RHSA-2025:1962

RHSA-2025:1963

RHSA-2025:1964

RHSA-2025:2022

RHSA-2025:2130

RHSA-2025:2157

RHSA-2025:2195

RHSA-2025_1915

RHSA-2025_1917

ROSA-SA-2025-2865

SUSE-SU-2025:0574-1

SUSE-SU-2025:0589-1

SUSE-SU-2025:0599-1

SUSE-SU-2025_0574-1

SUSE-SU-2025_0589-1

SUSE-SU-2025_0599-1

USN-8011-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Emacs

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 76

• https://access.redhat.com/errata/RHSA-2025:1961 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:1915 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-1244 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-56713 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:1964 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0075.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-1244 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-1917.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-1915.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0574-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-1244 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-2130.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:2754 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-1915.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:2022 · Vendor Advisory