Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vim-commonUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-X11 | Apr 29, 2026 | Apr 29, 2026 |
| Alpine Linux | — | Upgrade vim | Apr 7, 2026 | Apr 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade vim-debuginfoUpgrade xxdUpgrade vim-X11Upgrade vim-commonUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-data | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-commonUpgrade vim-enhanced-debuginfoUpgrade vim-debuginfoUpgrade vim-dataUpgrade xxdUpgrade vim-filesystemUpgrade xxd-debuginfoUpgrade vim-enhancedUpgrade vim-debugsourceUpgrade vim-minimalUpgrade vim-default-editorUpgrade vim-minimal-debuginfo | Apr 14, 2026 | Apr 6, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jun 30, 2026 |
| Oracle_linux | — | Upgrade xxdUpgrade vim-minimalUpgrade vim-dataUpgrade vim-enhancedUpgrade vim-X11Upgrade vim-commonUpgrade vim-filesystem | Apr 30, 2026 | Apr 6, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 27, 2026 | Apr 6, 2026 |
| Redhat_linux | — | Upgrade vim-enhancedUpgrade vim-debugsourceUpgrade vim-minimalUpgrade vim-commonUpgrade vim-dataUpgrade vim-common-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-filesystemUpgrade vim-debuginfoUpgrade xxdUpgrade xxd-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-X11-debuginfoUpgrade vim-X11 | Apr 30, 2026 | Apr 6, 2026 |
| Rocky_linux | — | Upgrade vim-debugsourceUpgrade vim-minimal-debuginfoUpgrade vim-X11-debuginfoUpgrade vim-X11Upgrade vim-debuginfoUpgrade vim-enhancedUpgrade xxd-debuginfoUpgrade vim-common-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-minimalUpgrade xxdUpgrade vim-common | May 4, 2026 | Apr 30, 2026 |
| Ubuntu | — | Upgrade vim-runtime (Ubuntu Pro)Upgrade vim-runtimeUpgrade vim-tinyUpgrade vim-lesstif (Ubuntu Pro)Upgrade vim-gtk3Upgrade vim (Ubuntu Pro)Upgrade vim-athena-py2 (Ubuntu Pro)Upgrade vim-gtkUpgrade xxdUpgrade vim-nox-py2 (Ubuntu Pro)Upgrade vim-gui-common (Ubuntu Pro)Upgrade xxd (Ubuntu Pro)Upgrade vim-motifUpgrade vim-gnome (Ubuntu Pro)Upgrade vim-gtk-py2 (Ubuntu Pro)Upgrade vim-gtk (Ubuntu Pro)Upgrade vim-common (Ubuntu Pro)Upgrade vim-athena (Ubuntu Pro)Upgrade vim-tiny (Ubuntu Pro)Upgrade vim-gtk3-py2 (Ubuntu Pro)Upgrade vim-gtk3 (Ubuntu Pro)Upgrade vim-athenaUpgrade vimUpgrade vim-gui-commonUpgrade vim-commonUpgrade vim-nox (Ubuntu Pro)Upgrade vim-noxUpgrade vim-gnome-py2 (Ubuntu Pro) | Apr 15, 2026 | Apr 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub