PT-2026-29096 · Vim · Vim

Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-34714

Mitre

CVSS v3.1

9.2

Critical

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P MLE.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-34714

Affected Products

Vim

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-34714 · Security Note
• https://openwall.com/lists/oss-security/2026/03/30/3 · Note
• https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh · Note
• https://github.com/vim/vim/releases/tag/v9.2.0272 · Note
• https://github.com/vim/vim/commit/664701eb7576edb7c7c7d9f2d600815ec1f43459 · Note