CVE-2025-1244: Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Security readout for executives and security teams

CVE-2025-1244 is a high-severity Emacs command injection issue. A victim can trigger it by visiting a malicious website or redirected HTTP URL, causing vulnerable Emacs URI handling to run shell commands. It matters most on desktops, developer workstations, and build images where Emacs or affected Red Hat packages are installed. Exposure is likely where Emacs is installed on Linux endpoints or images and can be reached through browser or desktop URI handling. Red Hat specifically lists multiple RHEL 7, 8, and 9 package streams as affected. RHEL 10 is listed unaffected; RHEL 6 status is unknown in the provided data. Prioritize patching on developer workstations, admin desktops, and build environments because successful exploitation can run commands as the user. This is not listed as actively exploited in the provided sources, but the impact is high and the attack path is plausible through web browsing or redirects. Mitigation focus: Apply relevant Red Hat security advisories for affected RHEL packages.; Update GNU Emacs through trusted OS or vendor channels.; Check vendor guidance for non-Red Hat distributions before assuming fixed status..

Prepared

Jun 29, 2026, 21:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.