PT-2026-38684 · Vim+2 · Vim+2

Q1Uf3Ng · Published 2026-05-03 · Updated 2026-06-23 · CVE-2026-44656

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0435

Description An OS command injection issue exists in the :find command-line completion. When the path option contains shell commands enclosed in backticks, these commands are executed during file name completion. Since the path option lacks the P SECURE flag, it can be modified via a modeline. This allows an attacker who controls a file's content to execute arbitrary shell commands if a user opens that file and triggers the :find completion.

Recommendations Update to version 9.2.0435.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2026-06512

CVE-2026-44656

ECHO-DBB6-47A0-A981

OESA-2026-2447

OESA-2026-2448

OESA-2026-2449

OESA-2026-2450

OESA-2026-2472

OPENSUSE-SU-2026:11114-1

SUSE-SU-2026:2313-1

USN-8304-1

Affected Products

Linuxmint

Ubuntu

Vim

References · 55

• 🔥 https://github.com/CryingN/CVE-2026-44656 · Exploit
• https://github.com/vim/vim/commit/190cb3c2b9c769a3972bcfd991a7b5b6cb771ef0 · Patch
• https://github.com/vim/vim/security/advisories/GHSA-hwg5-3cxw-wvvg · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11114-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42307 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44656 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46483 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2447 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8304-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2450 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42307 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-44656 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2026-44656 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2449 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45130 · Security Note