CVE-2026-52860 Vim: Arbitrary Code Execution via Python Omni-Completion

🗓️ 11 Jun 2026 18:33:45Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Vim vulnerability enabling arbitrary code execution via Python omni-completion; attacker-controlled code runs during completion; fixed in 9.2.0597.

Reporter	Title	Published	Views	Family All 36
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2026-1862)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim, --advisory ALAS2-2026-3368 (ALAS-2026-3368)	22 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 4.0: Vim PHSA-2026-4.0-1049	9 Jul 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Vim PHSA-2026-5.0-0908	30 Jun 202600:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Vim vulnerabilities (USN-8451-1)	20 Jun 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-52860	11 Jun 202600:00	–	nessus
Tenable Nessus	Vim < 9.2.0597 Code Execution (GHSA-65p9-mwwx-7468)	18 Jun 202600:00	–	nessus
Amazon	Important: vim	22 Jun 202600:00	–	amazon
Amazon	Important: vim	22 Jun 202600:00	–	amazon
AlpineLinux	CVE-2026-52860	11 Jun 202618:33	–	alpinelinux

Source	Link
github	www.github.com/vim/vim/releases/tag/v9.2.0597
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52860.json
access	www.access.redhat.com/security/cve/CVE-2026-52860
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52860.json
github	www.github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c
github	www.github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-52860
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2

15 Jul 2026 01:49Current

6.1Medium risk

Vulners AI Score6.1

CVSS 47.5

EPSS0.00224