CVE-2026-44656

CVE-2026-44656 - Vim Modelineのpathオプションにおけるコマンドインジェクションの脆弱性 English|中文 このリポジトリは、CVE-2026-44656 の再現環境を提供します。この脆弱性は、Vimのmodeline内のpathオプションにおけるバッククォート展開式の処理の欠陥に起因します。攻撃者は、:findコマンドのTab補完機能を利用して任意のコマンド実行を引き起こすことができます。 脆弱性の概要 CVE ID : CVE-2026-44656 影響範囲 : Vim（modeline + pathオプションのバッククォート展開） 攻撃ベクトル :...

CVE-2019-12735-VIM-NEOVIM

CVE-2019-12735-VIM-NEOVIM USAGE: 前提としてmodeline機能を有効にする必要があります 一般ユーザーではmodeline機能はデフォルトで有効ですが、rootユーザーではデフォルトで無効です。 echo &modeline で有効かどうかを確認します。1が有効、0が無効です。 ない場合は、/.vimrc（ファイルがなければ作成してください）に set modeline を追加してください。 自分で書き込む場合は、エスケープ文字 x1b が非表示文字であることに注意が必要です。...

CVE-2019-12735

CVE-2019-12735 Vim/Neovimのmodelineを介した任意コード実行の脆弱性です。 root@kitploit: Product: Vim 8.1.1365, Neovim 0.3.6 Type: Arbitrary Code Execution CVE: CVE-2019-12735 Date: 2019-06-04 Author: Arminius @rawsec バージョン8.1.1365より前のVimとバージョン0.3.6より前のNeovimには、特別な内容を含むテキストファイルを開いたときにmodelineを介して任意のコードを実行できる脆弱性があります。...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

vim: arbitrary command execution via modeline sandbox bypass

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allowed arbitrary OS commands to be executed when a user opened a crafted file. The complete, guitabtooltip, and printheader options lacked the PMLE flag, enabling a modeline to be execute...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. Prior to version 9.2.0435, there was a vulnerability related to OS command injection in Vim’s :find command-line completion mechanism. When the path option contained shell commands enclosed in backticks, those commands would be executed during file...

vim: arbitrary command execution via modeline sandbox bypass

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...

SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2026:3458-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3458-1 advisory. This update for vim fixes the following issues: Security issues fixed: - CVE-2026-59856: Arbitrary Code...

Security update for vim

This update for vim fixes the following issues: Security issues fixed: CVE-2026-59856: arbitrary code execution via PHP omni-completion bsc1271194. CVE-2026-59857: out-of-bounds write in SAL soundfolding bsc1271195. CVE-2026-59858: arbitrary code execution via C omni-completion bsc1271193. Non...

SUSE-SU-2026:3458-1 Security update for vim

This update for vim fixes the following issues: This update for vim fixes the following issues: Security issues fixed: - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion bsc1271194. - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding bsc1271195. - CVE-2026-59858: Arbitrary...

vim security update

9.1.083-9.0.1.el102.7 - Remove upstream references Orabug: 31197557 2:9.1.083-9.7 - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete 2:9.1.083-9.6 - RHEL-185867 CVE-2026-47167 vim: Code...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2765)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2026-2873)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2026-2842)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

vim security update

9.1.083-9.0.1.el102.7 - Remove upstream references Orabug: 31197557 2:9.1.083-9.7 - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete 2:9.1.083-9.6 - RHEL-185867 CVE-2026-47167 vim: Code...

vim security update

8.2.2637-26.0.1.el98.10 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.10 - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave 2:8.2.2637-26.9 - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete 2:8.2.2637-26.8 - RHEL-185874 CVE-2026-47167...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2026-2677)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in runtime/autoload/tar.v...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2026-2718)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in runtime/autoload/tar.v...

CVE-2026-59857

An out-of-bounds write vulnerability in Vim's spellsoundfoldsal function allows an attacker to corrupt memory and crash the editor Denial of Service by supplying a specially crafted word during spell sound-folding. Mitigation This vulnerability can be mitigated by preventing Vim from automaticall...