#local-privilege

Emacs TRAMP zero-click flaw runs local shell commands

Crafted remote-style file names can execute arbitrary local commands during connection setup, with no successful remote login required.