Vim: Command injection via backtick expansion in tag filenames
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2026-41411 vim Corrigé dans: 9.2.0357-r0
- Debian DEBIAN-CVE-2026-41411 vim
- Ubuntu UBUNTU-CVE-2026-41411 vim Corrigé dans: 2:7.4.052-1ubuntu3.1+esm27
Description d'origine La description telle que publiée par la source (souvent en anglais).
Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filename field contains backtick syntax (e.g., command), Vim executes the embedded command via the system shell with the full privileges of the running user.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com