CVE-2026-96442
HIGH
7,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.
94
Improper Control of Generation of Code ('Code Injection')
DraftCommon Consequences
Security Scopes Affected:
Access Control
Integrity
Confidentiality
Availability
Non-Repudiation
Potential Impacts:
Bypass Protection Mechanism
Gain Privileges Or Assume Identity
Execute Unauthorized Code Or Commands
Hide Activities
Applicable Platforms
Languages:
Interpreted
Technologies:
AI/ML
https://access.redhat.com/security/cve/CVE-2026-96442
https://bugzilla.redhat.com/show_bug.cgi?id=2537347
https://github.com/emacs-mirror/emacs/commit/135e6f63f08fee3d374fa1a5187bce941a…
https://github.com/emacs-mirror/emacs/commit/abc802ee2eb0b1663349ddf22a461f8e54…
https://www.openwall.com/lists/oss-security/2026/09/14/1