CyberRota Analysis
AI-GeneratedA vulnerability in Emacs TRAMP allows local attackers to exploit improperly sanitized filename concatenation, leading to potential arbitrary code execution when these filenames are processed. Organizations using Emacs TRAMP should prioritize patching this flaw to mitigate the risk of local exploitation and protect their systems from unauthorized code execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.