Search: CVE-2026-79992

CVE-2026-79992 is a local OS command injection vulnerability in Emacs TRAMP affecting Red Hat Enterprise Linux 10. It arises from improper sanitization of login arguments concatenated and passed to a local shell, allowing a local attacker to execute arbitrary code by processing maliciously crafted filenames. Exploitation requires user interaction with a malicious file, limiting remote exploitability. The vulnerability has a high severity with a CVSS score of 7.8. Red Hat advises avoiding processing untrusted filenames or interacting with remote systems that may contain malicious filenames as a mitigation.