CVE-2026-52860

🗓️ 18 Jun 2026 15:45:08Reported by redhat.comType

A flaw was found in Vim, an open-source command-line text editor. The Python omni-completion feature executes reconstructed function and class definitions from the current buffer. A remote attacker can exploit this by crafting a hostile buffer, le...

Reporter	Title	Published	Views	Family All 20
AlpineLinux	CVE-2026-52860	11 Jun 202618:33	–	alpinelinux
CBLMariner	CVE-2026-52860 affecting package vim for versions less than 9.2.0620-1	13 Jun 202618:21	–	cbl_mariner
CNNVD	Vim 代码注入漏洞	11 Jun 202600:00	–	cnnvd
CVE	CVE-2026-52860	11 Jun 202618:33	–	cve
Cvelist	CVE-2026-52860 Vim: Arbitrary Code Execution via Python Omni-Completion	11 Jun 202618:33	–	cvelist
Debian CVE	CVE-2026-52860	11 Jun 202618:33	–	debiancve
EUVD	EUVD-2026-36285	11 Jun 202618:33	–	euvd
Microsoft CVE	Vim: Arbitrary Code Execution via Python Omni-Completion	13 Jun 202608:01	–	mscve
NVD	CVE-2026-52860	11 Jun 202619:16	–	nvd
OSV	ALPINE-CVE-2026-52860	11 Jun 202619:16	–	osv

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-52860
github	www.github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2
github	www.github.com/vim/vim/releases/tag/v9.2.0597
github	www.github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c
github	www.github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

18 Jun 2026 15:45Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.8 - 8

CVSS 47.5

EPSS0.00228

SSVC