Emacs: emacs: arbitrary code execution in flymake mode
Historical advisory recorded 5 Nov 2026 00:54:08 UTC. Read the latest advisory.
cve-program · CVE-2026-96442
PublishedA code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-96442
PublishedEmacs: emacs: arbitrary code execution in flymake mode
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.
- Source published
- 23 Sep 2026 10:10:36 UTC
- Source modified
- 5 Nov 2026 00:14:27 UTC
- Saved here
- 5 Nov 2026 00:54:08 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H