CVE-2025-1244

HIGH

Emacs - Unauthenticated Remote Code Execution via HTTP URL Redirect

Title source: llm
STIX 2.1

Description

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

References (17)

Core 17
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:1915
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:1917
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:1961
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:1962
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:1963
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:1964
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:2022
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:2130
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:2157
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:2195
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2025:2754
Vendor Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2025-1244
Issue Tracking issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2345150

Scores

CVSS v3 8.8
EPSS 0.0129
EPSS Percentile 79.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Products (17)
Red Hat/Builds for Red Hat OpenShift 1.3.2 sha256:02dfa9ff3833810645246f3af3ef89c2ea6794b61f3cdfe0929596ebf5bf042f
Red Hat/Red Hat Enterprise Linux 10
Red Hat/Red Hat Enterprise Linux 6
Red Hat/Red Hat Enterprise Linux 7 Extended Lifecycle Support 1:24.3-23.el7_9.2
Red Hat/Red Hat Enterprise Linux 8 1:26.1-13.el8_10
Red Hat/Red Hat Enterprise Linux 8.2 Advanced Update Support 1:26.1-5.el8_2.3
Red Hat/Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 1:26.1-5.el8_4.3
Red Hat/Red Hat Enterprise Linux 8.4 Telecommunications Update Service 1:26.1-5.el8_4.3
Red Hat/Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 1:26.1-5.el8_4.3
Red Hat/Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 1:26.1-7.el8_6.6
... and 7 more
Published Feb 12, 2025
Tracked Since Feb 18, 2026