PT-2026-35033 · Vim+2 · Vim+2

Andynx90 + 1 · Published 2026-04-24 · Updated 2026-05-28 · CVE-2026-41411

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0357

Description Command injection occurs during tag file processing. When resolving a tag, the filename field from the tags file undergoes wildcard expansion to resolve environment variables and wildcards. If this field contains backtick syntax, such as command, the embedded command is executed via the system shell with the full privileges of the running user.

Recommendations Update to version 9.2.0357 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-41411

ECHO-C375-87D8-EE8B

OESA-2026-2201

OESA-2026-2202

OESA-2026-2203

OESA-2026-2204

OESA-2026-2297

USN-8246-1

USN-8342-1

Affected Products

Linuxmint

Ubuntu

Vim

References · 30

• https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb · Patch
• https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-39881 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8342-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2026-41411 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-41411 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8246-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-41411 · Security Note
• https://ubuntu.com/security/CVE-2026-35177 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41411 · Security Note
• https://osv.dev/vulnerability/USN-8342-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2201 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2202 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2203 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-41411 · Vendor Advisory