Vim: Command injection via backtick expansion in tag filenames
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2026-41411 vim 修正版: 9.2.0357-r0
- Debian DEBIAN-CVE-2026-41411 vim
- Ubuntu UBUNTU-CVE-2026-41411 vim 修正版: 2:7.4.052-1ubuntu3.1+esm27
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filename field contains backtick syntax (e.g., command), Vim executes the embedded command via the system shell with the full privileges of the running user.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com