A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2130 advisory.

    [1:24.3-23.0.1.1]
    - Fix CVE-2025-1244 man.el shell injection vulnerability [Orabug: 37658579]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote host is prior to 24.3-20.26. It is, therefore, affected by a vulnerability as referenced in the ALAS-2025-1964 advisory.

    A flaw was found in the Emacs text editor. Improper handling of custom man URI schemes allows attackers     to execute arbitrary shell commands by tricking users into visiting a specially crafted website or an HTTP     URL with a redirect. (CVE-2025-1244)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2770 advisory.

    A flaw was found in the Emacs text editor. Improper handling of custom man URI schemes allows attackers     to execute arbitrary shell commands by tricking users into visiting a specially crafted website or an HTTP     URL with a redirect. (CVE-2025-1244)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect. (CVE-2025-1244)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2195 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2130 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2157 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1962 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2022 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1961 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1964 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1963 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1915 advisory.

    [1:27.2-11.1]
    - Eliminate use of obsolete patch syntax (RHEL-80443)

    [1:27.2-11]
    - Fix man.el shell injection vulnerability (RHEL-79025)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5871 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5871-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     February 27, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : emacs     CVE ID         : CVE-2024-53920 CVE-2025-1244

    Two security vulnerabilities were discovered in Emacs:

    CVE-2024-53920

        Elisp byte-compilation ('elisp-flymake-byte-compile') in the Flymake         mode is now disabled for untrusted files.

    CVE-2025-1244

        An incomplete escaping of shell meta characters in the man reader         component could potentially result in the execution of arbitrary         shell commands. Discovered by Maxim Nikulin.

    For the stable distribution (bookworm), these problems have been fixed in     version 1:28.2+1-15+deb12u4.

    We recommend that you upgrade your emacs packages.

    For the detailed security status of emacs please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/emacs

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1917 advisory.

    [1:26.1-13]
    - Fix man.el shell injection vulnerability (RHEL-79016)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1915 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme [rhel-9.5.z]     (CVE-2025-1244)

    Bug Fix(es):

    * Eliminate use of obsolete %patchN syntax [rhel-9.5.z] (JIRA:RHEL-80450)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1917 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4069 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4069-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     February 27, 2025                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : emacs     Version        : 1:27.1+1-3.1+deb11u6     CVE ID         : CVE-2023-28617 CVE-2024-53920 CVE-2025-1244     Debian Bug     : 1033342 1088690 1098255

    Multiple vulnerabilities were discovered in GNU Emacs, the extensible,     customisable, self-documenting, real-time display editor.

    CVE-2023-28617

        Improper handling of file or directory names containing shell         metacharacters in the ob-latex Lisp library could allow the         execution of attacker-controlled code.

    CVE-2024-53920

        Several ways to trigger arbitrary code execution were discovered in         Emacs's support for editing files in its own dialect of Lisp.
        These include arbitrary code execution upon opening an otherwise         innocent-looking file, with any (or no) file extension, for editing.

    CVE-2025-1244

        Improper handling of custom 'man' URI schemes could allow an         attacker to execute arbitrary shell commands by tricking users into         visiting a specially crafted website, or an HTTP URL with a         redirect.

    For Debian 11 bullseye, these problems have been fixed in version     1:27.1+1-3.1+deb11u6.

    We recommend that you upgrade your emacs packages.

    For the detailed security status of emacs please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/emacs

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote host is prior to 30.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-057-01 advisory.

    New emacs packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the emacs security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e60e538f-e795-4a00-b475-cc85a7546e00 advisory.

    A shell injection vulnerability exists in GNU Emacs due to improper               handling of custom man URI schemes.
    Initially considered low severity, as it required user interaction with               local files, it was later discovered that an attacker could exploit this               vulnerability by tricking a user into visiting a specially crafted               website or an HTTP URL with a redirect, leading to arbitrary shell               command execution without further user action.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0599-1 advisory.

    - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections.
    (bsc#1237091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1244 advisory.

  - A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect. (CVE-2025-1244)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1244 advisory.

  - A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect. (CVE-2025-1244)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0589-1 advisory.

    - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections.
    (bsc#1237091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0574-1 advisory.

    - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections.
    (bsc#1237091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
233287	Oracle Linux 7 : emacs (ELSA-2025-2130)	Nessus	Oracle Linux Local Security Checks	high
232888	Amazon Linux AMI : emacs (ALAS-2025-1964)	Nessus	Amazon Linux Local Security Checks	high
232355	Amazon Linux 2 : emacs (ALAS-2025-2770)	Nessus	Amazon Linux Local Security Checks	high
231964	Linux Distros Unpatched Vulnerability : CVE-2025-1244	Nessus	Misc.	high
221622	RHEL 9 : emacs (RHSA-2025:2195)	Nessus	Red Hat Local Security Checks	high
217108	RHEL 7 : emacs (RHSA-2025:2130)	Nessus	Red Hat Local Security Checks	high
217017	RHEL 8 : emacs (RHSA-2025:2157)	Nessus	Red Hat Local Security Checks	high
217008	RHEL 8 : emacs (RHSA-2025:1962)	Nessus	Red Hat Local Security Checks	high
217005	RHEL 9 : emacs (RHSA-2025:2022)	Nessus	Red Hat Local Security Checks	high
216993	RHEL 8 : emacs (RHSA-2025:1961)	Nessus	Red Hat Local Security Checks	high
216992	RHEL 9 : emacs (RHSA-2025:1964)	Nessus	Red Hat Local Security Checks	high
216987	RHEL 8 : emacs (RHSA-2025:1963)	Nessus	Red Hat Local Security Checks	high
216950	Oracle Linux 9 : emacs (ELSA-2025-1915)	Nessus	Oracle Linux Local Security Checks	high
216930	Debian dsa-5871 : emacs - security update	Nessus	Debian Local Security Checks	critical
216918	Oracle Linux 8 : emacs (ELSA-2025-1917)	Nessus	Oracle Linux Local Security Checks	high
216906	RHEL 9 : emacs (RHSA-2025:1915)	Nessus	Red Hat Local Security Checks	high
216905	RHEL 8 : emacs (RHSA-2025:1917)	Nessus	Red Hat Local Security Checks	high
216874	Debian dla-4069 : emacs - security update	Nessus	Debian Local Security Checks	high
216858	Slackware Linux 15.0 / current emacs Multiple Vulnerabilities (SSA:2025-057-01)	Nessus	Slackware Local Security Checks	critical
216706	FreeBSD : Emacs -- Arbitrary code execution vulnerability (e60e538f-e795-4a00-b475-cc85a7546e00)	Nessus	FreeBSD Local Security Checks	high
216661	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2025:0599-1)	Nessus	SuSE Local Security Checks	high
216631	Azure Linux 3.0 Security Update: emacs (CVE-2025-1244)	Nessus	Azure Linux Local Security Checks	high
216624	CBL Mariner 2.0 Security Update: emacs (CVE-2025-1244)	Nessus	MarinerOS Local Security Checks	high
216515	SUSE SLES15 Security Update : emacs (SUSE-SU-2025:0589-1)	Nessus	SuSE Local Security Checks	high
216445	SUSE SLES12 Security Update : emacs (SUSE-SU-2025:0574-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2025-1244

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

critical

high

high

high

high

critical

high

high

high

high

high

high