PT-2026-48707 · Vim+3 · Vim+3

Christopher Lusk · CVE-2026-47167 · Published 2026-06-11 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0496

Description A code injection issue exists in the s:stepmatch() function within the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) for builds with +ruby support. Step-definition patterns read from .rb files in the features/*/ or stories/*/ directories are embedded into a Ruby Kernel.eval argument without sufficient escaping. This allows a crafted pattern in an attacker-controlled repository to execute arbitrary Ruby code and shell commands when a user invokes a step-jump mapping ([d, ]d).

Recommendations Update to version 9.2.0496.

Exploit

Fix

Code Injection

Eval Injection

Weakness Enumeration

CWE-94

CWE-95

Related Identifiers

BDU:2026-10822

CVE-2026-47167

ECHO-A9BB-DC9E-FA5F

GHSA-4473-94JM-W5X9

OESA-2026-2863

USN-8451-1

Affected Products

Linuxmint

Red Os

Ubuntu

Vim

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47167.json · Exploit
• https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934 · Patch
• https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8451-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8451-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-47167 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52858 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-47167 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-10822 · Security Note
• https://ubuntu.com/security/CVE-2026-52860 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-52858 · Security Note
• https://ubuntu.com/security/CVE-2026-52859 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-38509.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-52860 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-47167 · Security Note