RCE in Vim

CVE-2026-73078

Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating atta…

Vulnerability class: Command Injection (OS Command Injection)

Affected products

  • Vim — versions < 9.2.0840

Weakness classification (CWE)

References