diff --git a/test/regression/3735-modeline-arbitrary-code-execution/cmd b/test/regression/3735-modeline-arbitrary-code-execution/cmd
new file mode 100644
index 00000000..fefcd4a9
--- /dev/null
+++ b/test/regression/3735-modeline-arbitrary-code-execution/cmd
@@ -0,0 +1,3 @@
+:modeline-parse<ret>
+%
+:exec c %opt{pwned}<ret>
diff --git a/test/regression/3735-modeline-arbitrary-code-execution/in b/test/regression/3735-modeline-arbitrary-code-execution/in
new file mode 100644
index 00000000..4393d125
--- /dev/null
+++ b/test/regression/3735-modeline-arbitrary-code-execution/in
@@ -0,0 +1 @@
+# kak: tabstop=2;set-option	buffer	pwned	yes
diff --git a/test/regression/3735-modeline-arbitrary-code-execution/out b/test/regression/3735-modeline-arbitrary-code-execution/out
new file mode 100644
index 00000000..c508d536
--- /dev/null
+++ b/test/regression/3735-modeline-arbitrary-code-execution/out
@@ -0,0 +1 @@
+false
diff --git a/test/regression/3735-modeline-arbitrary-code-execution/rc b/test/regression/3735-modeline-arbitrary-code-execution/rc
new file mode 100644
index 00000000..69ee4408
--- /dev/null
+++ b/test/regression/3735-modeline-arbitrary-code-execution/rc
@@ -0,0 +1,3 @@
+source "%val{runtime}/rc/detection/modeline.kak"
+declare-option -hidden bool pwned no
+set-option global tabstop 42