CVE-2026-73077
EUVD-2026-5623311.08.2026, 16:17
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vim | vim | 𝑥 < 9.2.0839 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gvim |
| ||||||||||||||||||||||||
| vim |
| ||||||||||||||||||||||||
| vim-data |
| ||||||||||||||||||||||||
| vim-data-common |
| ||||||||||||||||||||||||
| vim-small |
|
Red Hat Enterprise Linux Releases
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| vim-X11 |
| ||||
| vim-common |
| ||||
| vim-data |
| ||||
| vim-debuginfo |
| ||||
| vim-debugsource |
| ||||
| vim-default-editor |
| ||||
| vim-enhanced |
| ||||
| vim-enhanced-debuginfo |
| ||||
| vim-filesystem |
| ||||
| vim-minimal |
| ||||
| vim-minimal-debuginfo |
| ||||
| xxd |
| ||||
| xxd-debuginfo |
|
