A flaw in Emacs TRAMP allows a local attacker to trigger arbitrary code execution by processing specially crafted filenames. The vulnerability arises because TRAMP concatenates login arguments without adequate sanitization before passing them to the local shell, a classic example of operating system command injection (CWE‑78). If exploited, an attacker gains the privileges of the user running Emacs, potentially compromising the entire system.

The issue affects Red Hat Enterprise Linux releases 6, 7, 8, 9 and 10 when they run Emacs with TRAMP enabled, as the affected components are included in each distribution. No specific Emacs version is mentioned, so all default installs are potentially vulnerable.

The CVSS score of 7.8 places the vulnerability in the high range, indicating significant risk when the flaw is exploited. The EPSS score is not available, so the exact likelihood of exploitation cannot be quantified from the CVE data; however, the flaw is known to permit arbitrary code execution. The vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog, suggesting no active exploits have been publicly observed yet.