CVE-2026-73077 | Vim up to 9.2.0838 Filetype Plugins runtime/ftplugin/sh.vim fnameescape os command injection (Nessus ID 341579 / WID-SEC-2026-2513)

A vulnerability was found in Vim up to 9.2.0838. It has been classified as problematic. The impacted element is the function fnameescape of the file runtime/ftplugin/sh.vim of the component Filetype Plugins. Performing a manipulation results in os command injection. This vulnerability is reported as CVE-2026-73077. The attack requires a local... Weiterlesen