RCE in Vim

CVE-2026-73076

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimbal…

Vulnerability class: RCE (Remote Code Execution)

Affected products

  • Vim — versions < 9.2.0847

Weakness classification (CWE)

References