CVE-2025-1244Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Description

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

Timeline

Scores

EPSS (exploitation in 30 days)

2.6% · top 14% of all CVEs (12 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Affected products

• emacs

  • affected < 29.4.0

• Red Hat · Red Hat Enterprise Linux 7 Extended Lifecycle Support

  • unaffected 1:24.3-23.el7_9.2 – < *

• Red Hat · Red Hat Enterprise Linux 8

  • unaffected 1:26.1-13.el8_10 – < *

• Red Hat · Red Hat Enterprise Linux 8

  • unaffected 1:26.1-13.el8_10 – < *

• Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update Support

  • unaffected 1:26.1-5.el8_2.3 – < *

• Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

  • unaffected 1:26.1-5.el8_4.3 – < *

• Red Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update Service

  • unaffected 1:26.1-5.el8_4.3 – < *

• Red Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

  • unaffected 1:26.1-5.el8_4.3 – < *

• Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

  • unaffected 1:26.1-7.el8_6.6 – < *

• Red Hat · Red Hat Enterprise Linux 8.6 Telecommunications Update Service

  • unaffected 1:26.1-7.el8_6.6 – < *

• Red Hat · Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

  • unaffected 1:26.1-7.el8_6.6 – < *

• Red Hat · Red Hat Enterprise Linux 8.8 Extended Update Support

  • unaffected 1:26.1-10.el8_8.7 – < *

• Red Hat · Red Hat Enterprise Linux 9

  • unaffected 1:27.2-11.el9_5.1 – < *

• Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

  • unaffected 1:27.2-6.el9_0.2 – < *

• Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Support

  • unaffected 1:27.2-8.el9_2.2 – < *

• Red Hat · Red Hat Enterprise Linux 9.4 Extended Update Support

  • unaffected 1:27.2-10.el9_4.1 – < *

• Red Hat · Builds for Red Hat OpenShift 1.3.2

  • unaffected 1.3.1-1741784043 – < *

• Red Hat · Red Hat Enterprise Linux 10

  All versions: unaffected

• Red Hat · Red Hat Enterprise Linux 6

  All versions: unknown

What to do

Workaround: There is no an existing or known mitigation for this issue without disabling part of the Emacs core functionality. However, by avoiding opening or view untrusted files, websites, HTTP URLs or other URI resources with Emacs would reduce or prevent the risk of performing this attack successfully.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2025-2098 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2025-1244](https://cveledger.app/badge/CVE-2025-1244.svg)](https://cveledger.app/cve/CVE-2025-1244)

Record last updated 4 Nov 2026, 21:22 UTC.