Beveiligingsadvies

CVE-2026-34982

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 15:16:48

Laatst bijgewerkt 2026-09-04 12:04:49

Toegewezen door GitHub_M

CVSS-score 8.2

Status PUBLISHED

Beschrijving

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗