7.8

CVE-2026-43961

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user running Vim.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellervim
≫
Produkt vim
Default Statusunaffected
Version 0
Version < 9.2.0480
Status affected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 10
Default Statusunknown
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 6
Default Statusunknown
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 7
Default Statusunknown
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8
Default Statusunknown
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 9
Default Statusunknown
HerstellerRed Hat
≫
Produkt Red Hat OpenShift Container Platform 4
Default Statusunknown
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.056
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
RedHat 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

https://access.redhat.com/security/cve/CVE-2026-43961
https://bugzilla.redhat.com/show_bug.cgi?id=2460434
https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3
http://www.openwall.com/lists/oss-security/2026/05/14/7