CVE-2026-73077

A flaw was found in Vim, an open-source command-line text editor. The filetype plugins for shell scripts sh.vim, zsh.vim, ps1.vim insecurely handle Visual-mode selections, allowing an attacker to inject and execute arbitrary operating-system commands. This occurs because shell metacharacters are...