Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honors the bar as a command separator, a crafted tag field can close the search pattern and append an arbitrary Ex command; opening a hostile .c file whose project tags file contains such an entry and invoking C omni-completion runs that command as the editing user. This issue is fixed in version 9.2.0735.
CVSS Details
- CVSS 4.0 Base Score: 8.4 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vim-X11Upgrade vim-commonUpgrade vim-minimalUpgrade vim-enhancedUpgrade vim-filesystem | Aug 2, 2026 | Jul 29, 2026 |
| Alpine Linux | — | Upgrade vim | Jul 14, 2026 | Jul 9, 2026 |
| Amazon Linux Ami 2 | — | Upgrade xxdUpgrade vim-dataUpgrade vim-debuginfoUpgrade vim-filesystemUpgrade vim-commonUpgrade vim-X11Upgrade vim-minimalUpgrade vim-enhanced | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-minimal-debuginfoUpgrade vim-commonUpgrade vim-debugsourceUpgrade vim-minimalUpgrade xxd-debuginfoUpgrade vim-filesystemUpgrade vim-enhancedUpgrade xxdUpgrade vim-dataUpgrade vim-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-default-editor | Aug 10, 2026 | Jul 9, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 19, 2026 | Jul 9, 2026 |
| Redhat_linux | — | Upgrade vim-dataUpgrade vim-common-debuginfoUpgrade vim-minimalUpgrade vim-enhanced-debuginfoUpgrade xxdUpgrade vim-debuginfoUpgrade vim-minimal-debuginfoUpgrade xxd-debuginfoUpgrade vim-X11-debuginfoUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-debugsourceUpgrade vim-X11Upgrade vim-common | Jul 17, 2026 | Jul 9, 2026 |
| Rocky_linux | — | Upgrade vim-X11-debuginfoUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-debugsourceUpgrade vim-common-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-X11Upgrade vim-enhanced-debuginfoUpgrade vim-debuginfoUpgrade vim-common | Aug 3, 2026 | Jul 31, 2026 |
| Ubuntu | — | Upgrade vim-tiny (Ubuntu Pro)Upgrade xxdUpgrade vim-athenaUpgrade vim-commonUpgrade vim-tinyUpgrade vim-gtk3 (Ubuntu Pro)Upgrade vim-gtk3-py2 (Ubuntu Pro)Upgrade vim-noxUpgrade vim-runtime (Ubuntu Pro)Upgrade vim-runtimeUpgrade vim-gtk (Ubuntu Pro)Upgrade vim-athena (Ubuntu Pro)Upgrade vim-gui-common (Ubuntu Pro)Upgrade vim-gtkUpgrade vim-gnome (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vim-nox-py2 (Ubuntu Pro)Upgrade vim-lesstif (Ubuntu Pro)Upgrade vim-motifUpgrade xxd (Ubuntu Pro)Upgrade vim-gtk-py2 (Ubuntu Pro)Upgrade vim-gnome-py2 (Ubuntu Pro)Upgrade vim-common (Ubuntu Pro)Upgrade vim (Ubuntu Pro)Upgrade vim-gtk3Upgrade vim-gui-commonUpgrade vim-athena-py2 (Ubuntu Pro)Upgrade vim | Jul 15, 2026 | Jul 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 13, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub