Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840.
CVSS Details
- CVSS 4.0 Base Score: 8.6 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 19, 2026 | Aug 11, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-dataUpgrade vim-commonUpgrade xxd-debuginfoUpgrade vim-minimalUpgrade vim-debugsourceUpgrade vim-enhanced-debuginfoUpgrade vim-enhancedUpgrade xxdUpgrade vim-debuginfoUpgrade vim-filesystemUpgrade vim-minimal-debuginfoUpgrade vim-default-editor | Sep 1, 2026 | Aug 11, 2026 |
| Redhat_linux | — | Upgrade xxd-debuginfoUpgrade vim-debuginfoUpgrade vim-X11Upgrade vim-minimal-debuginfoUpgrade vim-X11-debuginfoUpgrade xxdUpgrade vim-dataUpgrade vim-commonUpgrade vim-filesystemUpgrade vim-enhanced-debuginfoUpgrade vim-minimalUpgrade vim-debugsourceUpgrade vim-enhancedUpgrade vim-common-debuginfoNo solution exists | Aug 17, 2026 | Aug 11, 2026 |
| Rocky_linux | — | Upgrade vim-minimal-debuginfoUpgrade vim-enhancedUpgrade vim-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-minimalUpgrade xxdUpgrade xxd-debuginfoUpgrade vim-X11Upgrade vim-commonUpgrade vim-X11-debuginfoUpgrade vim-debugsourceUpgrade vim-common-debuginfo | Sep 15, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade vim-tiny (Ubuntu Pro)Upgrade vim-gtkUpgrade vim-nox-py2 (Ubuntu Pro)Upgrade vim-gnome-py2 (Ubuntu Pro)Upgrade vim-gtk (Ubuntu Pro)Upgrade vim-common (Ubuntu Pro)Upgrade xxdUpgrade vim-athenaUpgrade vim-tinyUpgrade vim-gui-common (Ubuntu Pro)Upgrade vim-noxUpgrade vim (Ubuntu Pro)Upgrade vim-gtk-py2 (Ubuntu Pro)Upgrade vim-commonUpgrade vim-gtk3 (Ubuntu Pro)Upgrade vim-gnome (Ubuntu Pro)Upgrade vim-athena-py2 (Ubuntu Pro)Upgrade xxd (Ubuntu Pro)Upgrade vim-runtime (Ubuntu Pro)Upgrade vim-motifUpgrade vim-nox (Ubuntu Pro)Upgrade vim-gui-commonUpgrade vimUpgrade vim-gtk3Upgrade vim-lesstif (Ubuntu Pro)Upgrade vim-gtk3-py2 (Ubuntu Pro)Upgrade vim-runtimeUpgrade vim-athena (Ubuntu Pro) | Aug 23, 2026 | Aug 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 2, 2026 | Aug 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub