GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Gnu Subscribe
Emacs Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=80574#227 cve-icon cve-icon
https://yhetil.org/emacs/[email protected]/T/#m319545e835fb71d764bf868166632d4633167a75 cve-icon cve-icon
History

Tue, 22 Sep 2026 21:45:00 +0000

Type Values Removed Values Added
Title Arbitrary Code Execution via read-symbol-shorthands in GNU Emacs

Tue, 22 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 22 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
Description GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.
First Time appeared Gnu
Gnu emacs
Weaknesses CWE-829
CPEs cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*
Vendors & Products Gnu
Gnu emacs
References
Metrics cvssV4_0

{'score': 7.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-09-22T20:47:53.328Z

Reserved: 2026-09-22T20:32:40.413Z

Link: CVE-2026-96269

cve-icon Vulnrichment

Updated: 2026-09-22T20:47:50.487Z

cve-icon NVD

Status : Received

Published: 2026-09-22T21:17:35.150

Modified: 2026-09-22T21:17:35.150

Link: CVE-2026-96269

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T21:30:20Z

Weaknesses