High [CVE-2026-73076] Arbitrary command execution via crafted vimball
This high-severity Red Hat Linux advisory covers CVE-2026-73076 affecting Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named.
VimballRecord to overwrite the installation record with attacker-chosen commands.
When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through:!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.
A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious. VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.
This is an Important vulnerability in Vim where a crafted vimball can lead to arbitrary command execution.
The flaw allows an attacker to embed malicious commands within a `.VimballRecord` file, which are then executed with user privileges during a later, unrelated vimball installation or removal. This extends the impact of processing untrusted vimball files beyond the initial installation.
Red Hat severity: Important — CVSS 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Weakness: CWE-78.
Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7.
- < 9.2.0847
Official advisory · high-confidence parse· fetched 23 days ago·verify at source
- 9.2.0847
- vim-2:9.1.083-9.el10_2.20
- vim-2:8.0.1763-31.el8_10.7
- vim-2:8.2.2637-26.el9_8.21
- RHSA-2026:66336
- RHSA-2026:66348
- RHSA-2026:66366
Official advisory · high-confidence parse· fetched 23 days ago·verify at source
Mitigation checklist
- Avoid installing or removing vimballs from untrusted sources. This vulnerability relies on a user processing a malicious vimball, which then injects commands that are executed during a subsequent vimball operation. Exercise caution when handling vimball files from unknown or unverified origins.
Official advisory · high-confidence parse· fetched 23 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.