CVE-2026-73073High· 7.8▾ TwilightVim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file,…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 18.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.1%
— → 7.3
none → high
0.1% → 0.2%
Last analysed / modified upstream
7.3 → 7.8
Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.
vim < 9.2.0845Upgrade past the affected range:
vim 9.2.0845Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-73076High· 7.8Vim is an open source, command line text editor
CVE-2026-43961High· 7.8A flaw was found in Vim's netrw plugin
CVE-2026-52860High· 7.8Vim is an open source, command line text editor
CVE-2026-47162High· 8.8Vim is an open source, command line text editor
CVE-2026-73077High· 7.8Vim is an open source, command line text editor
CVE-2026-34982High· 8.2Vim is an open source, command line text editor