Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495.
CVSS Details
- CVSS 4.0 Base Score: 7.3 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade vim-minimalUpgrade vim-commonUpgrade vim-dataUpgrade xxdUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-X11Upgrade vim-debuginfo | Jun 23, 2026 | Jun 23, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 19, 2026 | Jun 11, 2026 |
| Redhat_linux | — | Upgrade vim-filesystemUpgrade vim-X11Upgrade xxd-debuginfoUpgrade vim-debuginfoUpgrade vim-X11-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-commonUpgrade vim-debugsourceUpgrade vim-enhancedUpgrade xxdUpgrade vim-minimalUpgrade vim-enhanced-debuginfoUpgrade vim-common-debuginfoUpgrade vim-data | Jul 17, 2026 | Jun 11, 2026 |
| Rocky_linux | — | Upgrade vim-X11-debuginfoUpgrade vim-minimalUpgrade vim-commonUpgrade vim-enhanced-debuginfoUpgrade vim-common-debuginfoUpgrade vim-enhancedUpgrade vim-debugsourceUpgrade vim-minimal-debuginfoUpgrade vim-debuginfoUpgrade vim-X11 | Aug 13, 2026 | Aug 11, 2026 |
| Ubuntu | — | Upgrade vim-tinyUpgrade vim-gui-commonUpgrade vim (Ubuntu Pro)Upgrade vim-noxUpgrade vim-gtk (Ubuntu Pro)Upgrade vim-gtk3-py2 (Ubuntu Pro)Upgrade vim-gnome (Ubuntu Pro)Upgrade vim-commonUpgrade vim-tiny (Ubuntu Pro)Upgrade vim-runtimeUpgrade vim-nox-py2 (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vim-athenaUpgrade vim-motifUpgrade vim-gtkUpgrade vim-gui-common (Ubuntu Pro)Upgrade xxd (Ubuntu Pro)Upgrade vim-runtime (Ubuntu Pro)Upgrade vim-common (Ubuntu Pro)Upgrade vim-gtk3Upgrade vim-lesstif (Ubuntu Pro)Upgrade vim-gtk3 (Ubuntu Pro)Upgrade vimUpgrade vim-athena-py2 (Ubuntu Pro)Upgrade vim-athena (Ubuntu Pro)Upgrade xxdUpgrade vim-gtk-py2 (Ubuntu Pro)Upgrade vim-gnome-py2 (Ubuntu Pro) | Jun 21, 2026 | Jun 18, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 1, 2026 | Jun 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub