GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.
Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.