Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.
{
"cwe_ids": [
"CWE-94"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39881.json"
}[
{
"id": "CVE-2026-39881-45da910b",
"signature_version": "v1",
"target": {
"file": "src/netbeans.c",
"function": "nb_do_cmd"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19c6cb52f89a365b4",
"digest": {
"length": 23522.0,
"function_hash": "81721024236045771625662390547179796425"
}
},
{
"signature_version": "v1",
"id": "CVE-2026-39881-4cf1ed32",
"target": {
"file": "src/netbeans.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19c6cb52f89a365b4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"22420668137084580796422290630571659764",
"69277794231429749848264369625552565570",
"17070217746999554789535006930328436346",
"88611285363523048203374376829243899344",
"185065860555311217552053105849118916315",
"219786412317811238387355806203122696806",
"68209109390712964474986640122960338891",
"252888602546454317534249493321513162779",
"33975137909272817552577562986408479280",
"308641593467401786664504011960946685406",
"57209988496583944898775927913785873136",
"261069210019542362222853178730572415417",
"327689954515925100073696029343454230296",
"49896895449326529764525488356984537229",
"243115764642152900723495366801496097773",
"203445497755466696759839323109824075321",
"165389779046926013569434325651990028373"
]
}
},
{
"id": "CVE-2026-39881-7b1b4e7e",
"signature_version": "v1",
"target": {
"file": "src/errors.h"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19c6cb52f89a365b4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25193914035043890230435799100605442140",
"216164298822453535531889111909233003016",
"48128776543086011917015624949647684700"
]
}
},
{
"id": "CVE-2026-39881-bedd32b3",
"signature_version": "v1",
"target": {
"file": "src/version.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19c6cb52f89a365b4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146200493773228420153804765641940418619",
"110696712430573971008466219486969847316",
"8066225081902151913472600755431692406",
"339288067464848961576557588447708606793"
]
}
},
{
"signature_version": "v1",
"id": "CVE-2026-39881-ce014456",
"target": {
"file": "src/netbeans.c",
"function": "special_keys"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19c6cb52f89a365b4",
"digest": {
"length": 798.0,
"function_hash": "335915171082641642802251956755327193206"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-39881.json"
"2026-05-30T05:39:03Z"