8.2
High
CVE-2026-34982 Vim is an open source, command line text editor
Description
Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vim 9.2 | earliest → < 9.2.0276 | 9.2.0276 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Versions not published |
Show the 47 other branches Hide the 47 other branches
References
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of vim
The 73 CVEs of vim →
CVE-2026-43961
Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
7.8
High
CVE-2026-73073
Vim is an open source, command line text editor
7.1
High
CVE-2026-73078
Vim is an open source, command line text editor
8.6
High
CVE-2026-73077
Vim is an open source, command line text editor
8.4
High