PT-2026-67852 · Vim · Vim
CVE-2026-51400
·
Published
2026-08-04
·
Updated
2026-08-05
CVSS v3.1
8.4
High
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Vim Project versions prior to 9.2.0390
Description
A local attacker can execute arbitrary code through the
vms fixfilename() function located in the vim/src/os vms.c file.Recommendations
Update to a version newer than 9.2.0389.
As a temporary workaround, restrict access to the
vms fixfilename() function to minimize the risk of exploitation.Exploit
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vim