PT-2026-67853 · Vim+1 · Vim+1
CVE-2026-51401
·
Published
2026-08-03
·
Updated
2026-08-10
CVSS v3.1
7.7
High
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Vim Project versions prior to 9.2.0390
Description
A local attacker can execute arbitrary code through the
vms fixfilename() function located in the vim/src/os vms.c file.Recommendations
Update to a version newer than 9.2.0389.
As a temporary workaround, restrict access to the
vms fixfilename() function to minimize the risk of exploitation.Exploit
Fix
NULL Pointer Dereference
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Red Os
Vim