CVE-2025-1244

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

State: Published
Severity: 8.8 High
Published: Feb 12, 2025
Updated: Sep 6, 2026
Reserved: Feb 12, 2025

Description

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	redhat

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
emacs	before 29.4.0Affected
Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat	1:24.3-23.el7_9.2 and laterNot affected
Red Hat Enterprise Linux 8Red Hat	1:26.1-13.el8_10 and laterNot affected
Red Hat Enterprise Linux 8Red Hat	1:26.1-13.el8_10 and laterNot affected
Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat	1:26.1-5.el8_2.3 and laterNot affected
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat	1:26.1-5.el8_4.3 and laterNot affected
Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat	1:26.1-5.el8_4.3 and laterNot affected
Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat	1:26.1-5.el8_4.3 and laterNot affected
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat	1:26.1-7.el8_6.6 and laterNot affected
Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat	1:26.1-7.el8_6.6 and laterNot affected
Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsRed Hat	1:26.1-7.el8_6.6 and laterNot affected
Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat	1:26.1-10.el8_8.7 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	1:27.2-11.el9_5.1 and laterNot affected
Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsRed Hat	1:27.2-6.el9_0.2 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat	1:27.2-8.el9_2.2 and laterNot affected
Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat	1:27.2-10.el9_4.1 and laterNot affected
Builds for Red Hat OpenShift 1.3.2Red Hat	1.3.1-1741784043 and laterNot affected
Red Hat Enterprise Linux 10Red Hat
Red Hat Enterprise Linux 6Red Hat

References

RHSA-2025:1915vendor-advisory
RHSA-2025:1917vendor-advisory
RHSA-2025:1961vendor-advisory
RHSA-2025:1962vendor-advisory
RHSA-2025:1963vendor-advisory
RHSA-2025:1964vendor-advisory
RHSA-2025:2022vendor-advisory
RHSA-2025:2130vendor-advisory
RHSA-2025:2157vendor-advisory
RHSA-2025:2195vendor-advisory
RHSA-2025:2754vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-1244vdb-entry
RHBZ#2345150issue-tracking
https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=820f0793f0b46448928905552726c1f1b999062f
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=66390
https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-30.1
http://www.openwall.com/lists/oss-security/2025/03/01/2
https://lists.debian.org/debian-lts-announce/2025/02/msg00033.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.