CVE-2026-34982

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The complete, guitabtooltip and printheader options are missing the PMLE flag, allowing a modeline to be executed...

CVE-2026-34982 Vim modeline bypass via various options affects Vim < 9.2.0276

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The complete, guitabtooltip and printheader options are missing the PMLE flag, allowing a modeline to be executed...

CVE-2026-34982

CVE-2026-34982 is a Vim modeline sandbox bypass. Prior to Vim 9.2.0276, a crafted file can trigger arbitrary OS command execution due to a modeline vulnerability. The issue arises because the complete, guitabtooltip and printheader options miss the P_MLE flag, allowing a modeline to be executed, ...