CVE-2026-59858highCWE-94

CVE-2026-59858: falha de alta gravidade em vim

Vim: Arbitrary Code Execution via C Omni-Completion

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar vim+ Monitorar vim

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.4epss 0.1%
Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honors the bar as a command separator, a crafted tag field can close the search pattern and append an arbitrary Ex command; opening a hostile .c file whose project tags file contains such an entry and invoking C omni-completion runs that command as the editing user. This issue is fixed in version 9.2.0735.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
vim · vim
CVEs relacionadas — vim

No mesmo produto, das mais perigosas para as menos.

CVE-2025-27423HIGHImproper Input Validation in VimEPSS 22.5%CVE-2026-28417MEDIUMVim has OS Command Injection in netrwEPSS 1.4%CVE-2026-44656MEDIUMVim: OS Command Injection via 'path' completionEPSS 0.9%CVE-2025-53906MEDIUMVim has path traversal issue with zip.vim and special crafted zip archivesEPSS 0.9%CVE-2026-33412MEDIUMVim affected by Command injection via newline in glob()EPSS 0.9%CVE-2026-42307MEDIUMVim: OS Command Injection in netrwEPSS 0.8%