vim · Vulnerability
Historical advisory recorded 6 Nov 2026 06:36:20 UTC. Read the latest advisory.
cve-program · CVE-2026-43961
PublishedA flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user running Vim.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-43961
PublishedVim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user running Vim.
- Source published
- 19 Aug 2026 14:06:09 UTC
- Source modified
- 6 Nov 2026 05:58:15 UTC
- Saved here
- 6 Nov 2026 06:36:20 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H