AZL-95550
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95550.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-95550
- Upstream
- Published
- 2026-08-11T16:17:39Z
- Modified
- 2026-09-10T14:17:28Z
- Summary
- CVE-2026-73078 affecting package vim for versions less than 9.2.0957-1
- Details
-
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840.
- References