CVE advisoryCRITICAL
CVE-2024-39331
Emacs Org Mode Allows Unsafe Function Expansion in Links
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Emacs' Org Mode allows for the expansion of unsafe link abbreviations, potentially enabling arbitrary command execution. While Emacs is typically a local application, a crafted file could trigger this if opened by a user. The vulnerability is present in Emacs before version 29.4 and Org Mode before 9