CVE-2026-47167

CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on Vim builds with +ruby support. Step-defin…

Vulnerability class: RCE (Remote Code Execution)

Weakness classification (CWE)

References