CVE-2026-47162

🗓️ 11 Jun 2026 18:32:14Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

Vimscript code injection in netrw history save via crafted directory name can execute commands; patched in Vim 9.2.0495.

Reporter	Title	Published	Views	Family All 27
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2026-1862)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim, --advisory ALAS2-2026-3368 (ALAS-2026-3368)	22 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Vim PHSA-2026-5.0-0908	30 Jun 202600:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Vim vulnerabilities (USN-8451-1)	20 Jun 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-47162	11 Jun 202600:00	–	nessus
Amazon	Important: vim	22 Jun 202600:00	–	amazon
Amazon	Important: vim	22 Jun 202600:00	–	amazon
AlpineLinux	CVE-2026-47162	11 Jun 202618:32	–	alpinelinux
CBLMariner	CVE-2026-47162 affecting package vim for versions less than 9.2.0620-1	13 Jun 202618:21	–	cbl_mariner
Circl	CVE-2026-47162	15 Jun 202601:01	–	circl

NVD

Vulners

Node

vim vimRange<9.2.0495

[
  {
    "vendor": "vim",
    "product": "vim",
    "versions": [
      {
        "version": "< 9.2.0495",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c
github	www.github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b
github	www.github.com/vim/vim/releases/tag/v9.2.0495
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2026-47162
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47162.json

Parameter	Position	Path	Description	CWE
s:NetrwBookHistSave()	path	runtime/pack/dist/opt/netrw/autoload/netrw.vim	Vimscript code injection in netrw history serialization when writing to ~/.vim/.netrwhist	CWE-74, CWE-94
serialization of browsed directory paths to history file	path	runtime/pack/dist/opt/netrw/autoload/netrw.vim	Vimscript code injection in netrw history serialization when writing to ~/.vim/.netrwhist	CWE-74, CWE-94

30 Jun 2026 03:20Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.3 - 8.8

CVSS 47.3

EPSS0.00219

SSVC

vimscript injection netrw history crafted directory name shell commands patched version 9.2.0495