PT-2026-35033 · Vim+4 · Vim+4

Andynx90 + 1 · CVE-2026-41411 · Published 2026-04-24 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0357

Description Command injection occurs during tag file processing. When resolving a tag, the filename field from the tags file undergoes wildcard expansion to resolve environment variables and wildcards. If this field contains backtick syntax, such as command, the embedded command is executed via the system shell with the full privileges of the running user.

Recommendations Update to version 9.2.0357 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

ALSA-2026:28209

ALSA-2026:28210

ALSA-2026:28553

BDU:2026-09836

CVE-2026-41411

ECHO-C375-87D8-EE8B

GHSA-CWGX-GCJ7-6QH8

OESA-2026-2201

OESA-2026-2202

OESA-2026-2203

OESA-2026-2204

OESA-2026-2297

RHSA-2026:28209

RHSA-2026:28210

RHSA-2026:28553

RHSA-2026:33453

RHSA-2026:34476

RHSA-2026:34477

USN-8246-1

USN-8342-1

Affected Products

Linuxmint

Red Os

Rocky Linux

Ubuntu

Vim

References · 52

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41411.json · Exploit
• https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb · Patch
• https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-28553.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-28209.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:28209 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8342-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35177 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-39881 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-28553.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-8342-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-41411 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-41411 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2297 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-41411 · Vendor Advisory