Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vim-X11Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-common | Apr 13, 2026 | Apr 7, 2026 |
| Alpine Linux | — | Upgrade vim | Mar 25, 2026 | Mar 24, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-enhanced-debuginfoUpgrade vim-dataUpgrade vim-default-editorUpgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-debugsourceUpgrade vim-debuginfoUpgrade xxd-debuginfoUpgrade vim-commonUpgrade vim-minimalUpgrade vim-minimal-debuginfoUpgrade xxd | Apr 14, 2026 | Mar 24, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jun 2, 2026 |
| Oracle_linux | — | Upgrade vim-filesystemUpgrade vim-dataUpgrade vim-X11Upgrade vim-minimalUpgrade vim-enhancedUpgrade vim-commonUpgrade xxd | Apr 22, 2026 | Mar 24, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Mar 24, 2026 |
| Redhat_linux | — | Upgrade vim-enhanced-debuginfoUpgrade vim-debugsourceUpgrade vim-minimalUpgrade vim-common-debuginfoUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-X11-debuginfoUpgrade vim-dataUpgrade vim-X11Upgrade vim-debuginfoUpgrade xxdUpgrade vim-minimal-debuginfoUpgrade xxd-debuginfoUpgrade vim-common | Apr 3, 2026 | Mar 24, 2026 |
| Rocky_linux | — | Upgrade xxd-debuginfoUpgrade vim-debugsourceUpgrade xxdUpgrade vim-common-debuginfoUpgrade vim-minimalUpgrade vim-enhanced-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-enhancedUpgrade vim-X11-debuginfoUpgrade vim-X11Upgrade vim-debuginfoUpgrade vim-common | Apr 10, 2026 | Apr 9, 2026 |
| Ubuntu | — | Upgrade vim-nox-py2 (Ubuntu Pro)Upgrade vim-athenaUpgrade vim-runtimeUpgrade vim-noxUpgrade vim-gnome (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vim-athena (Ubuntu Pro)Upgrade vim-runtime (Ubuntu Pro)Upgrade vim-gui-commonUpgrade vim-commonUpgrade vim-tiny (Ubuntu Pro)Upgrade vim-lesstif (Ubuntu Pro)Upgrade vim-common (Ubuntu Pro)Upgrade xxdUpgrade vim-gnome-py2 (Ubuntu Pro)Upgrade vim-tinyUpgrade vim-gtk (Ubuntu Pro)Upgrade xxd (Ubuntu Pro)Upgrade vim-motifUpgrade vimUpgrade vim-gui-common (Ubuntu Pro)Upgrade vim-athena-py2 (Ubuntu Pro)Upgrade vim-gtk3-py2 (Ubuntu Pro)Upgrade vim-gtkUpgrade vim (Ubuntu Pro)Upgrade vim-gtk3Upgrade vim-gtk3 (Ubuntu Pro)Upgrade vim-gtk-py2 (Ubuntu Pro) | Apr 15, 2026 | Apr 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub