CVE-2026-108976 | GNU Emacs up to 31.1 TRAMP tramp-user-regexp os command injection

October 11, 2026 Yanac

A vulnerability classified as problematic was found in GNU Emacs up to 31.1. This issue affects the function tramp-user-regexp of the component TRAMP. Executing a manipulation can lead to os command injection.

The identification of this vulnerability is CVE-2026-108976. The attack can only be executed locally. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More