# CVE-2026-79992: Emacs: local shell command injection through the user field in emacs tramp CVE-2026-79992 is fixed in 20 products on 1 platform, first by FEDORA-2026-6B1A89DFE6, released August 28, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-79992 - Priority: High - CVSS: 7.8 (Important) - EPSS: 0.0022 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Aug 21, 2026 - Weakness: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79992 ## Description GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219) * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | emacs Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs RHEL 10 | 29.4-14.el10_2.3 | [RHSA-2026:84591](https://patchblox.com/security/data/fix/linux/rhsa-2026-84591.md) | Sep 14, 2026 | | Linux | emacs RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs opensuse-leap 16.0 | 30.2-160000.3.1 | [OPENSUSE-SU-2026:21711-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21711-1.md) | Aug 31, 2026 | | Linux | emacs rocky 10 | 1:29.4-14.el10_2.3 | [RLSA-2026:84591](https://patchblox.com/security/data/fix/linux/rlsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs rocky 8 | 1:26.1-15.el8_10.2 | [RLSA-2026:80506](https://patchblox.com/security/data/fix/linux/rlsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs rocky 9 | 1:27.2-18.el9_8.2 | [RLSA-2026:80507](https://patchblox.com/security/data/fix/linux/rlsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs sles 15.6 | 27.2-150400.3.37.1 | [SUSE-SU-2026:4893-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4893-1.md) | Nov 7, 2026 | | Linux | emacs sles 15.7 | 27.2-150400.3.37.1 | [SUSE-SU-2026:4893-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4893-1.md) | Nov 7, 2026 | | Linux | emacs sles 16.0 | 30.2-160000.3.1 | [SUSE-SU-2026:23589-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23589-1.md) | Aug 31, 2026 | | Linux | emacs-common Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-common RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-common RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs-common almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-common almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-common almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-common amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-common ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-common ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-common ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-common-debuginfo Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-common-debuginfo amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-debuginfo Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-debuginfo amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-debugsource Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-debugsource amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-devel Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-devel amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-filesystem RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-filesystem RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs-filesystem almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-filesystem almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-filesystem almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-filesystem amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-filesystem ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-filesystem ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-filesystem ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-gtk+x11 Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-gtk+x11-debuginfo Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-lucid Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-lucid RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-lucid RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs-lucid almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-lucid almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-lucid almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-lucid amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-lucid ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-lucid ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-lucid ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-lucid-debuginfo Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-lucid-debuginfo amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-nox RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-nox RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs-nox almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-nox almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-nox amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-nox ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-nox ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-nox-debuginfo amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-nw Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-nw almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-nw ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-nw-debuginfo Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-pgtk Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-pgtk-debuginfo Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacs-terminal RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-terminal almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-terminal amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-terminal ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacsclient Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | | Linux | emacsclient-debuginfo Fedora 43 | 1:30.2-11.fc43 | [FEDORA-2026-6B1A89DFE6](https://patchblox.com/security/data/fix/linux/fedora-2026-6b1a89dfe6.md) | Aug 28, 2026 | --- Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.