By vendor

Vim vulnerabilities

Known CVEs affecting Vim products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-47162HIGH 8.8

  Vim, the popular open-source text editor, contains a code injection vulnerability in its netrw file browser plugin. When you browse directories in Vim, it saves a history of the paths you've visited to a file called .netrwhist. An attacker can craft a malicious directory name containing special characters that, when saved to this history file, breaks out of the intended string format and tricks Vim into executing arbitrary commands the next time you open the editor. This could allow an attacker to run malicious code on your system if you cd into or browse a directory with a carefully crafted name. The vulnerability is fixed in Vim version 9.2.0495 and later.

• CVE-2026-47167MEDIUM 5.3

  Vim, a widely-used command-line text editor, contains a code injection flaw in its Cucumber filetype plugin when Ruby support is enabled. The vulnerability arises from unsafe handling of step-definition patterns extracted from Ruby files in a repository's features or stories directories. When a user attempts to jump to a step definition using Vim's step-jump mapping, malicious patterns can execute arbitrary Ruby code and shell commands. This requires local access and user interaction—the attacker must first get the user to open a repository containing a crafted .rb file, then the user must trigger the vulnerable mapping. The issue is resolved in Vim version 9.2.0496.