CVE-2026-73077

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0839

Description Filetype plugins runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim fail to safely separate shell arguments when passing Visual-mode selections from K through keywordprg commands. Because fnameescape() and PATH ESC CHARS do not neutralize shell metacharacters, the functions ShKeywordPrg(), ZshKeywordPrg(), or GetHelp() can be used to execute arbitrary operating-system commands via bash, zsh, or PowerShell with the privileges of the user running the editor.

Recommendations Update to version 9.2.0839.